# CRP Gateway ## RELEASE NOTES > v2.3.2 ### Upgrade Steps * Refer to CRP Gateway Patching Guide v2.0 or above ### New Features ### Bug Fixes * Fixed encryption certificate upload to CRP from **Account Management** being rejected because the **Effective End Date Time** was sent as the certificate's **Valid Until** value exactly. CRP requires the effective end to fall before the certificate expiry; the gateway now sends **Valid Until** minus one second, consistent with the existing one-day offset applied to the effective start date. * Fixed PMDS prescribed consent list download failing when CRAOC returns an empty list (`no_of_records=0`) as a ZIP containing a 0-byte CSV. The JDK ZIP reader could not decompress this archive, so no file was written to the share folder and no file record was created. Decompression now uses the Apache Commons Compress in-memory reader, producing the expected 0-byte CSV. ### Improvements