When TLS is enabled for a server, or TLS server has been configured to check client certificates with TLS_RequireClientCert, this optional flag parameter specifies that Certificate Revocation List (CRL) must be checked for revoked certificates during validation of the peer certificate.