There is an issue that allow to connect older clients with revokated certificates when your reset the CRL.