HP-UX IPSec Version A.03.00 Administrator's Guide

A CA certificate must be stored in cACertificate;binary attribute.
A CRL must be stored in a certificateRevocationList;binary attribute. Some vendors
publish the CRL as a certificateRevocationList;binary attribute of a
certificationAuthority object. Other vendors publish the CRL as a
certificateRevocationList;binary attribute of a cRLDistributionPoint object.
116 Using Certificates with HP-UX IPSec