code: protected X509CRL downloadCRLFromWeb(String crlURL) throws IOException, CertificateVerificationException {
          URL url = new URL(crlURL);
          try (InputStream crlStream = url.openStream()) {
              CertificateFactory cf = CertificateFactory.getInstance(Constants.X_509);
              return (X509CRL) cf.generateCRL(crlStream);
          } catch (MalformedURLException e) {
              throw new CertificateVerificationException("CRL URL is malformed", e);
          } catch (IOException e) {
              throw new CertificateVerificationException("Cant reach URI: " + crlURL + " - only support HTTP", e);
          } catch (CertificateException e) {
              throw new CertificateVerificationException(e);
          } catch (CRLException e) {
              throw new CertificateVerificationException("Cannot generate X509CRL from the stream data", e);
          }
      }
docs: Downloads CRL from the crlUrl. Does not support HTTPS.
  
  @param crlURL URL of the CRL distribution point.
  @return Downloaded CRL.
  @throws IOException If an error occurs while downloading the CRL from web.
  @throws CertificateVerificationException If an error occurs in CRL download process.