Thanks. You've been most helpful. One thing about the import of CRLs in the cert DB: how big can the cert DB get? I looks like the cert DB will keep growing without bounds, as long as new CRLs are added to it. Moreover, deleting a CRL from the cert DB does not reduce the DB's size!
Finally, at one time, importing large CRLs caused a corruption of the cert DB: Have all the problems related to this issue been fixed as of NSS 3.4 (I'm currently using NSS 3.4.2)? Are there any outstanding problems concerning the import of CRLs in the cert DB? -- POC