X509_LOOKUP_hash_dir is a more advanced method, which loads certificates and CRLs on demand, and caches them in memory once they are loaded. It also checks for newer CRLs upon each lookup, so that ...