A basic configuration: <IfModule mod_ca_crl.c> CACRLCertificateRevocationList /etc/pki/ca/ca-crl.pem </IfModule> <IfModule mod_crl.c> <Location /crl> SetHandler crl </Location> </IfModule>