For whatever reason we expose CRLs as a type, but they are barely usable. You can parse a CRL, but can't even properly examine it, verify it, etc.

randombit/botan-rs#95

Also we don't support OCSP, or certificate stores (eg accessing the system cert store, creating a new store, ...) which would be pretty critical for most real world usages.