openSSL

 Name                    Last modified      Size  Description
 Parent Directory                             -   
 2022-11/                2022-10-29 12:03    -   

certs in Munki

revocation

manually verify

https://www.digicert.com/kb/ssl-support/pem-ssl-creation.htm

understand

https://serverfault.com/questions/9708/what-is-a-pem-file-and-how-does-it-differ-from-other-openssl-generated-key-file

https://www.namecheap.com/support/knowledgebase/article.aspx/9968/38/how-to-check-the-certificate-revocation-status

https://stackoverflow.com/questions/51970569/openssl-cli-verify-crl-of-an-entire-certification-chain

Alternatives

Rustls -- fast !

BearSSL very small

compare 18 differet options