Revoke certificate for ipsec with CRL

Hello,

To revoke an IPsec certificate using a Certificate Revocation List (CRL) updated via SCEP, 

1. Obtain the updated CRL using SCEP from the CA server.
2. Import the CRL to the FortiGate unit: Using the GUI: under System -> Certificates -> CRLs. and  on 'Import'. Select the appropriate options based on your CRL source (HTTP, LDAP, SCEP).  Click Import.
3.  Execute the command: 'execute system certificate crl import auto <CRL_name>`

Thanks for the answer.
We will import the CRL list to the device. But the certificate that we want to revoke has the Valid status.
How can we change the status? or how will fortigate understand that the certificate has been revoked and cannot be used for ipsec.
In fortios 7.2 there is no strict-crl-check parameter, from the article : https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-strict-CRL-check/ta-p/190669?externalID=FD45219