CRL Certificate Revocation List, missing feature: persistence of invalidated serial numbers, certificate chains (more than just provider / CR-root)

[danielweck]

T-Systems: 3-tier intermediary certificate
(current LCP app only ships "root CA" certificate, to verify provider certs extracted from LCP JSON licenses)

Recommendation: activate DISABLE_CRL preprocessor directive (or remove code in source tree). This will remove dependency on C++ thread (10mn interval check for CRL distribution points) and NetProvider.
Instead, make use of platform-specific crypt/cert API for CRL and other cert verification tasks?

See also:
#25