><p><strong>Added</strong> Certificate Revocation List (CRL) support for peer certificate validation based on file paths specified in <code>ClientTLSSettings</code> in destination rule for Sidecars, and in <code>ServerTLSSettings</code> in Gateway for Gateways.</p></li><li><p><strong>Fixed</strong> list matching for the audience claims in JWT tokens.
(<a href=https://github.com/istio/istio/issues/49913>Issue #49913</a>)</p></li><li><p><strong>Removed</strong> the <code>first-party-jwt</code> legacy option f