TIL Chrome ignores CRL. Instead, it pushes out a curated list of invalidated certificates that it thinks are important enough to know about.

And no, we can't see the list.

So, if my web store is hacked and I invalidate the certificate, Chrome users will never know.

Excellent.