The nice thing about the c_rehash script is it figures out whether something is a crl or a certificate bundle for you according to the man page https://docs.openssl.org/3.3/man1/openssl-rehash/#options