In addition to the list at https://thalesdocs.com/dpod/resources/client_resources/network_connectivity/index.html#certificate-authority-crls-and-ocsps users of the Luna Cloud HSM service are advised to whitelist the following URLs for the Google Certificate Authority CRL and OCSP instead of the specific URL.

http://c.pki.goog/
http://o.pki.goog/

Recent changes to the certificates mean the previous specific crl url in the documentation is no longer correct however the documentation has now been updated to reflect the correct crl url. If the client is unable to download the Certificate Revocation List, the client will return an error: "The revocation function was unable to check revocation because the revocation server was offline."