CRLs are issued within one hour after every certificate revocation, and at least seven days before expiration of the last-issued CRL. The maximum validity period of a CRL is 30 days.