Question on opnsense generated CAs and revocation

[wallaby501]

It seems to me (based on looking at the key usage specs) that CAs generated by opnsense are not designed to be used with revocation?

I ask this because I've had an old CA and am standing up a new one and see that my CAs are listed under revocation but are unable to export a CRL. Ones I've imported from a vendor or two are able to but clicking on the export button or anything else for mine does nothing.

Also, unsure but the docs say to click the "+" button to add one but I see no button like that on mine. Changed the theme back to the included stock "opnsense-dark" and still didn't see it.