The value of tmnxPkiCRLExpWarningHours specifies the time period (in hours) at which the system will generate the tmnxPkiCRLBeforeExpWarning trap for all in-use CRLs (certificate revocation lists) before expiration. If tmnxPkiCRLExpWarningHours is configured, the system will also generate the tmnxPkiCRLAfterExpWarning trap when a CRL expires. If both tmnxPkiCRLExpWarningHours and tmnxPkiCRLExpWarningRepeatHrs are configured to 0, the system will only generate the tmnxPkiCRLAfterExpWarning trap when a CRL expires. A value of -1 indicates that tmnxPkiCRLExpWarningHours is not configured. In this case, the system will not generate a trap even when a CRL expires. The objects tmnxPkiCRLExpWarningHours and tmnxPkiCRLExpWarningRepeatHrs have to be set together for the specific action to be performed.