Gets or sets DER-encoded certificate revocation lists (RFC 5280 §5) to check certificates against, besides those the signatures and the document security store carry. Empty by default.
public IReadOnlyList<byte[]> CertificateRevocationLists { get; set; }
RFC 5280 §5 and §6.3; ISO 32000-2 §12.8.3.4.6. A list counts only when the certificate's issuer signed it.