{
    "mode": "man",
    "parameter": "openssl-crl",
    "section": "1ssl",
    "url": "https://www.chedong.com/phpMan.php/man/openssl-crl/1ssl/json",
    "generated": "2026-06-15T15:18:05Z",
    "synopsis": "openssl crl [-help] [-inform DER|PEM] [-outform DER|PEM] [-key filename] [-keyform\nDER|PEM|P12] [-dateopt] [-text] [-in filename] [-out filename] [-gendelta filename] [-badsig]\n[-verify] [-noout] [-hash] [-hashold] [-fingerprint] [-crlnumber] [-issuer] [-lastupdate]\n[-nextupdate] [-nameopt option] [-CAfile file] [-no-CAfile] [-CApath dir] [-no-CApath]\n[-CAstore uri] [-no-CAstore] [-provider name] [-provider-path path] [-propquery propq]",
    "sections": {
        "NAME": {
            "content": "openssl-crl - CRL command\n",
            "subsections": []
        },
        "SYNOPSIS": {
            "content": "openssl crl [-help] [-inform DER|PEM] [-outform DER|PEM] [-key filename] [-keyform\nDER|PEM|P12] [-dateopt] [-text] [-in filename] [-out filename] [-gendelta filename] [-badsig]\n[-verify] [-noout] [-hash] [-hashold] [-fingerprint] [-crlnumber] [-issuer] [-lastupdate]\n[-nextupdate] [-nameopt option] [-CAfile file] [-no-CAfile] [-CApath dir] [-no-CApath]\n[-CAstore uri] [-no-CAstore] [-provider name] [-provider-path path] [-propquery propq]\n",
            "subsections": []
        },
        "DESCRIPTION": {
            "content": "This command processes CRL files in DER or PEM format.\n",
            "subsections": []
        },
        "OPTIONS": {
            "content": "",
            "subsections": [
                {
                    "name": "-help",
                    "content": "Print out a usage message.\n"
                },
                {
                    "name": "-inform",
                    "content": "The CRL input format; unspecified by default.  See openssl-format-options(1) for details.\n"
                },
                {
                    "name": "-outform",
                    "content": "The CRL output format; the default is PEM.  See openssl-format-options(1) for details.\n"
                },
                {
                    "name": "-key",
                    "content": "The private key to be used to sign the CRL.\n"
                },
                {
                    "name": "-keyform",
                    "content": "The format of the private key file; unspecified by default.  See\nopenssl-format-options(1) for details.\n"
                },
                {
                    "name": "-in",
                    "content": "This specifies the input filename to read from or standard input if this option is not\nspecified.\n"
                },
                {
                    "name": "-out",
                    "content": "Specifies the output filename to write to or standard output by default.\n"
                },
                {
                    "name": "-gendelta",
                    "content": "Output a comparison of the main CRL and the one specified here.\n"
                },
                {
                    "name": "-badsig",
                    "content": "Corrupt the signature before writing it; this can be useful for testing.\n"
                },
                {
                    "name": "-dateopt",
                    "content": "Specify the date output format. Values are: rfc822 and iso8601.  Defaults to rfc822.\n"
                },
                {
                    "name": "-text",
                    "content": "Print out the CRL in text form.\n"
                },
                {
                    "name": "-verify",
                    "content": "Verify the signature in the CRL.\n"
                },
                {
                    "name": "-noout",
                    "content": "Don't output the encoded version of the CRL.\n"
                },
                {
                    "name": "-fingerprint",
                    "content": "Output the fingerprint of the CRL.\n"
                },
                {
                    "name": "-crlnumber",
                    "content": "Output the number of the CRL.\n"
                },
                {
                    "name": "-hash",
                    "content": "Output a hash of the issuer name. This can be use to lookup CRLs in a directory by issuer\nname.\n"
                },
                {
                    "name": "-hash",
                    "content": "Outputs the \"hash\" of the CRL issuer name using the older algorithm as used by OpenSSL\nbefore version 1.0.0.\n"
                },
                {
                    "name": "-issuer",
                    "content": "Output the issuer name.\n"
                },
                {
                    "name": "-lastupdate",
                    "content": "Output the lastUpdate field.\n"
                },
                {
                    "name": "-nextupdate",
                    "content": "Output the nextUpdate field.\n"
                },
                {
                    "name": "-nameopt",
                    "content": "This specifies how the subject or issuer names are displayed.  See\nopenssl-namedisplay-options(1) for details.\n"
                },
                {
                    "name": "-CAfile -no-CAfile -CApath -no-CApath -CAstore -no-CAstore",
                    "content": "See \"Trusted Certificate Options\" in openssl-verification-options(1) for details.\n"
                },
                {
                    "name": "-provider",
                    "content": ""
                },
                {
                    "name": "-provider-path",
                    "content": ""
                },
                {
                    "name": "-propquery",
                    "content": "See \"Provider Options\" in openssl(1), provider(7), and property(7).\n"
                }
            ]
        },
        "EXAMPLES": {
            "content": "Convert a CRL file from PEM to DER:\n\nopenssl crl -in crl.pem -outform DER -out crl.der\n\nOutput the text form of a DER encoded certificate:\n\nopenssl crl -in crl.der -text -noout\n",
            "subsections": []
        },
        "BUGS": {
            "content": "Ideally it should be possible to create a CRL using appropriate options and files too.\n",
            "subsections": []
        },
        "SEE ALSO": {
            "content": "openssl(1), openssl-crl2pkcs7(1), openssl-ca(1), openssl-x509(1), osslstore-file(7)\n",
            "subsections": []
        },
        "COPYRIGHT": {
            "content": "Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.\n\nLicensed under the Apache License 2.0 (the \"License\").  You may not use this file except in\ncompliance with the License.  You can obtain a copy in the file LICENSE in the source\ndistribution or at <https://www.openssl.org/source/license.html>.\n\n\n\n3.0.2                                        2026-06-02                            OPENSSL-CRL(1SSL)",
            "subsections": []
        }
    },
    "summary": "openssl-crl - CRL command",
    "flags": [
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Print out a usage message."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "The CRL input format; unspecified by default. See openssl-format-options(1) for details."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "The CRL output format; the default is PEM. See openssl-format-options(1) for details."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "The private key to be used to sign the CRL."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "The format of the private key file; unspecified by default. See openssl-format-options(1) for details."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "This specifies the input filename to read from or standard input if this option is not specified."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Specifies the output filename to write to or standard output by default."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Output a comparison of the main CRL and the one specified here."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Corrupt the signature before writing it; this can be useful for testing."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Specify the date output format. Values are: rfc822 and iso8601. Defaults to rfc822."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Print out the CRL in text form."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Verify the signature in the CRL."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Don't output the encoded version of the CRL."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Output the fingerprint of the CRL."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Output the number of the CRL."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Output a hash of the issuer name. This can be use to lookup CRLs in a directory by issuer name."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Outputs the \"hash\" of the CRL issuer name using the older algorithm as used by OpenSSL before version 1.0.0."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Output the issuer name."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Output the lastUpdate field."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "Output the nextUpdate field."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "This specifies how the subject or issuer names are displayed. See openssl-namedisplay-options(1) for details."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "See \"Trusted Certificate Options\" in openssl-verification-options(1) for details."
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": ""
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": ""
        },
        {
            "flag": "",
            "long": null,
            "arg": null,
            "description": "See \"Provider Options\" in openssl(1), provider(7), and property(7)."
        }
    ],
    "examples": [
        "Convert a CRL file from PEM to DER:",
        "openssl crl -in crl.pem -outform DER -out crl.der",
        "Output the text form of a DER encoded certificate:",
        "openssl crl -in crl.der -text -noout"
    ],
    "see_also": [
        {
            "name": "openssl",
            "section": "1",
            "url": "https://www.chedong.com/phpMan.php/man/openssl/1/json"
        },
        {
            "name": "openssl-crl2pkcs7",
            "section": "1",
            "url": "https://www.chedong.com/phpMan.php/man/openssl-crl2pkcs7/1/json"
        },
        {
            "name": "openssl-ca",
            "section": "1",
            "url": "https://www.chedong.com/phpMan.php/man/openssl-ca/1/json"
        },
        {
            "name": "openssl-x509",
            "section": "1",
            "url": "https://www.chedong.com/phpMan.php/man/openssl-x509/1/json"
        },
        {
            "name": "osslstore-file",
            "section": "7",
            "url": "https://www.chedong.com/phpMan.php/man/osslstore-file/7/json"
        }
    ]
}