You can import a certificate revocation list (CRL) into the NSX Manager and use the API to configure NSX Manager to retrieve a CRL.