A Certificate Authority $($CA$)$ had its issuing authority revoked, and its certificates expired. How might those certificates still appear valid, even though they should be on the Certificate Revocation List $($CRL$)?$

The company did not implement a CRL$.$

The CA blocked companies from adding it to the CRL$.$

The CRL still requires updating.

The company was a Root CA$.$