ipsec.d/crls

The directory /etc/ipsec.d/crls contains certificate revocation lists.