1) Is there a way to shrink a CRL? That is, to remove revoked certs (per
cert or en masse) from the CRL? While not optimal, even breaking the CRL
number by resetting it back to 0 would be a workable solution if that is
the only way.
2) Is there a way to manually trigger a new CRL before the "Next Update"
time?