Possible value for SSLContext.verify_flags. In this mode, certificate revocation lists (CRLs) are not checked. By default OpenSSL does neither require nor verify CRLs.
ssl/VERIFY_DEFAULT
VERIFY_DEFAULT