CRL directory snapshot changed

Logged when a successful directory refresh publishes a different set of CRLs.

Established peers depending on this CRL directory are revalidated against the new snapshot and configured verification policy. Accepted peers stay connected; rejected peers are disconnected. All dependent session resumption state is retired.

No action if the CRL change was intended. Otherwise, check the files in the configured CRL directory.