---
title: "CRL of a trusted FreeSign CA by fingerprint"
method: GET
path: "/.well-known/free-sign-signing-ca/{sha256}.crl"
---

# CRL of a trusted FreeSign CA by fingerprint

`GET /.well-known/free-sign-signing-ca/{sha256}.crl`

## Request

- Base URL: `https://free-sign.com`
- URL: `https://free-sign.com/.well-known/free-sign-signing-ca/{sha256}.crl`
- Auth: none declared

New leaf certificates carry this URL (for their issuing CA) as CRL Distribution Point, so it stays valid across CA rotations.

## Path parameters

- `sha256` string, required

## Response `200`

CRL (DER).

## Other responses

- `404`: No trusted CA with this fingerprint, or its CRL is not configured.

---

[API](https://skmtc.dev/free-sign/apis/freesign-free-e-signature-api.md) · [All operations](https://skmtc.dev/free-sign/apis/freesign-free-e-signature-api/llms.txt) · [OpenAPI document](https://skmtc.dev/free-sign/apis/freesign-free-e-signature-api/revisions/5d8e9854ab85?raw)