Global Edge Network Operational

Certificate Revocation Network

Authoritative, high-performance distribution of cryptographically signed Certificate Revocation Lists (DIVCRL1) powered by Cloudflare edge caching with zero bandwidth egress.

300+

Global Edge PoPs

< 15ms

Average Edge Latency

DIVCRL1

Ed25519 Wire Protocol

Published Product CRLs

Published Revocation Lists Canonical Endpoints

Loading revocation list directory from Cloudflare Edge...

In-Browser CRL Inspector Client-Side Only

Verify and inspect any DIVCRL1 token or armored PEM file right in your browser. Decoding executes 100% locally via Web Cryptography — no data leaves your machine.

Drop your .divcrl file here

or click to browse local files

Downstream Service Integration Go SDK & CLI

Command Line Interface — Synchronize & Verify Remote CRL

# Fetch, cryptographically verify against Ed25519 public key, and cache to local disk
license-cli crl sync \
  -url "https://crl.divmora.com/gitlab-fleet-governor.divcrl" \
  -public-key /etc/divmora/public.pem \
  -verbose

Go SDK — Daemon Background Periodic Sync & Instant Failover

// Initialize long-running background manager with automated hourly CRL polling
mgr, err := license.NewManager(license.ManagerConfig{
    Product:          "gitlab-fleet-governor",
    CRLURL:           "https://crl.divmora.com/gitlab-fleet-governor.divcrl",
    CRLSyncInterval:  1 * time.Hour,
    Policy:           license.PolicyDegraded, // Instantly fail over if license revoked
    OnCRLUpdated: func(crl *license.RevocationListClaims) {
        log.Printf("CRL synced: ID=%s, NextUpdate=%s", crl.ID, crl.NextUpdate)
    },
})

Environment Variable Configuration (Air-Gapped & On-Premises)

# Automatically picked up by license-go SDK and license-cli without code changes
export DIVMORA_CRL_URL="https://crl.divmora.com/gitlab-fleet-governor.divcrl"
export DIVMORA_CRL_CACHE_FILE="/var/lib/divmora/crl.cache"