A complete DER CRL retrieved by the application's network/cache policy.
A retrieved CRL whose signature, scope and freshness are checked by the SDK.
No complete CRL could be retrieved within the application's transport policy.