Originally cloned from JBCS-329 Customer is seeing the following issue on very large CRLs > 1MB and bigger unable to load CRL 8592:error:0D09E09B:asn1 encoding routines:X509_NAME_EX_D2I:too long:.\crypto\asn1\x_name.c:203: 8592:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error:.\crypto\asn1\tasn_dec.c:697:Field=issuer, Type=X509_CRL_INFO 8592:error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error:.\crypto\asn1\tasn_dec.c:697:Field=crl, Type=X509_CRL
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:3114