OpenVPN and CRL with Mirotik selfsigned certificates.....

Hi
I have to renew my certificates. I want to use CRL this time.
two questions:

  1. can i use a DNS name (xxx.xxx.dyndns.org) for the crl-host while signing ?
  2. which ports must be open to use mikrotik router as CRL Host ?

thx, Richard