18.8.5.1.7. Restrictions 
Subject name check: Identity check resolves hostname from phone
IP address and compares it with SubjectAlternativeName/CommonName in
certificate. However, this behavior might change in future with new Unify
recommendations.
Revocation: Only binary form of CRL in DER format is accepted
by CGW (not PEM). Conversion can be done e.g. with OpenSSL CRL tool.