ies</td><td>checks that client certificate is
      signed by a trusted certificate authority</td></tr><tr><td><a class="xref" href="runtime-config-connection.html#GUC-SSL-CRL-FILE">ssl_crl_file</a></td><td>certificates revoked by certificate authorities</td><td>client certificate must not be on this list</td></tr></tbody></table></div></div><br class="table-break" /><p>
    The server reads these files at server start and whenever the server
    configuration is reloaded.  On <span class="systemitem">Windo