Question: In a 3GPP SAE environment, what is the primary reason for making the CRL distribution point optional in the UICC certificate profile used for TLS handshake between RN and UICC?
Option 1: To reduce the size of the UICC certificate.
Option 2: Because revocation checks are not necessary for UICC certificates.
Option 3: Due to potential IP connectivity limitations during TLS handshake, making timely CRL retrieval impractical.
Option 4: To align with common practices in non-TLS, USIM-based authentication protocols.
Explanation: The UICC certificate's CRL distribution point is optional mainly due to the timing of when the RN learns the UICC certificate (during TLS handshake) and the potential lack of IP connectivity at this stage, which would hinder the retrieval of an up-to-date Certificate Revocation List (CRL).