This sounds very similar to the way Chrome handles Google's own malware-servers list:

  "If you have phishing and malware protection enabled, then Google Chrome will 
   contact servers at Google within five minutes of startup, and approximately 
   every half hour thereafter, to download updated lists of suspected phishing 
   and malware websites"[1]

It would be pretty cool if they made an aggregated CRL available via the same Safe Browsing API (used by Safari and Firefox).[2]

[1] http://blog.chromium.org/2008/11/understanding-phishing-and-...

[2] http://code.google.com/apis/safebrowsing/