I noticed CRL was not present within the Web App & API Protection tile. It is present within Multi-Cloud App Connect, under "Load Balancers?" but not within either persona tile within Certificate Management, where I would expect it.