The address from where a Certificate Revocation List (CRL) can be retrieved is usually included in the certificates (as crlDistributionPoint). LCOS provides a table for alternative URLs. After the system boot the corresponding CRLs are automatically loaded from these URLs and used in addition to the lists mentioned in the certificates.