The appliance collects certificate revocation lists automatically if this is activated in the MailSealer Settings (Use CRLS).
The certificate revocation lists contain the certificates that are locked or revoked by a certification authority (e.g. if a certificate is lost / compromised or is no longer considered secure for other reasons).