ssadm certrldb is a utility for managing the certificate revocations lists in the IKE certificate database.
Usage:
ssadm certrldb -[I] -[a|e|h|l|r] [action specific arguments]
where -I instructs the command to access the IKE database and a, e, h, l, and r represent add, extract, help, list, or remove. See the man page ssadm-certrldb(1M) for details.