https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage
--crl-verify crl ['dir']
Check peer certificate against the file crl in PEM format.
A CRL (certificate revocation list) is used when a particular key is compromised but when the overall PKI is still intact.