When we added the jarsigner -crl option in JDK 7, we had plans to add the support to the Java Runtime to read these CRLs and use them for revocation checking. But priorities changed at the time, and this will not be completed for JDK 7. Thus this option ultimately provides no value and we should therefore remove it from JDK 7.