The CRL part is according to the standard
RFC 5280, Section 8 (Security Considerations): "CAs SHOULD NOT include URIs that specify https, ldaps, or similar schemes in extensions."
(https://tools.ietf.org/html/rfc5280, page 103)
RFC 5280, Section 8 (Security Considerations): "CAs SHOULD NOT include URIs that specify https, ldaps, or similar schemes in extensions."
(https://tools.ietf.org/html/rfc5280, page 103)
(It's page 104 though ;P )