Does the latest NSS (3.3) fix the bug whereby large CRLs could not be added to the cert DB? And more generally, what is the current position of NSS/Mozilla with regards to using CRLs? At one time, use of the CRL in NSS was not recommended because of too many "corner problems"...
-- P
