1) Is there a way to shrink a CRL? That is, to remove revoked certs (per cert or en masse) from the CRL? While not optimal, even breaking the CRL number by resetting it back to 0 would be a workable solution if that is the only way.

2) Is there a way to manually trigger a new CRL before the "Next Update" time?