...
| Tip |
|---|
If /certificate/settings/set crl-use is set to yes, RouterOS will check CRL for each certificate in a certificate chain, therefore, an entire certificate chain should be installed into a device - starting from Root CA, intermediate CA (if there are such), and certificate that is used for specific service. For example, Google DoH, Cloudflare, and OpenDNS , and Quad9 full chain contain three certificates, NextDNS has four certificates. |
...
Cloudflare
Google
NextDNS
OpenDNS
Quad9
Incompatible DoH services:
...