Hi,
when zlint analyzes crl allowed extensions, it gets the OID for "CRLDistOID):
func (l *crlExtensions) Initialize() {
l.allowedExtensions = map[string]bool{
util.CrlDistOID.String(): true, // issuingDistributionPoint
and having a look at utils/oid.go
CrlDistOID = asn1.ObjectIdentifier{2, 5, 29, 31} // CRL Distribution Points
Acording to CABFORUM the allowed extension is "IssuingDistributionPoint" (2.5.29.28) and not the 2.5.29.31 which causes false positives if IssuingDistributionPoint extension appears.
Regards,