I know that modern web browsers don't check CRLs for certificates from CAs in the default trust store anymore. I also know that there are some exceptions for certificate validation when it comes to corporation / enterprise PKIs. For example for the lifetime of a certificate, optional certificate features like issuer policy and so on.
Since I came into an argument if OCSP responder are required in an corporate/enterprise PKI, my question is:
Do current Browsers (Edge, Chrome, Firefox, Safari) in 2023 still check CRLs of webserver and SubCA certificates to determine their certificate validity, if no AIA/OCSP distribution points are specified and the certificates are issued by an corporate/entterprise pki RootCA?
This does not ask the question if the certificates are considered valid. (They are) I ask if the CRL distribution points actual affect the certificate validity.