A retrieved CRL whose signature, scope and freshness are checked by the SDK.
Unpadded Base64URL-encoded DER CRL.