ceremony-type: crl
pkcs11:
    module: {{ .Module }}
    pin: {{ .UserPIN }}
    signing-key-slot: {{ .RootSlotID }}
    signing-key-label: {{ .RootLabel }}
inputs:
    issuer-certificate-path: {{ .Path }}root-{{ .RootSeqNr }}-cert.pem
outputs:
    crl-path: {{ .Path }}root-{{ .RootSeqNr }}-crl.pem
crl-profile:
    this-update: {{ .ThisUpdate }}
    next-update: {{ .NextUpdate }}
    number: {{ .CrlNumber }}
