Download current CRLs and CA certificates

These distribution points are public by design. Relying parties, devices and validation services fetch them anonymously — no sign-in, no client certificate and no allow-listing is required. Files are republished on each CRL interval; always fetch the current copy rather than caching one past its nextUpdate time. Every date below is read from the file itself and shown in UTC.