This tool and associated cron entry ensure that Certificate Revocation Lists (CRLs) are periodically retrieved from the web sites of the respective Certification Authorities. It assumes that the installed CA files follow the hash.crl_url convention. This latest version contains bugfix: When more than one URL was listed in the crl_url file, fetch-crl would download /all/ of these CRLs, even if the download of the first one was already successful. And it would complain loudly if any of these failed. This kind-of defeats the purpose of having multiple URLs there.