--- 2.2.21/ssl_engine_kernel.c	2011-11-09 16:18:32.039007547 +0100
+++ new/ssl_engine_kernel.c	2011-11-09 16:23:35.076006119 +0100
@@ -1587,7 +1587,7 @@
             ASN1_INTEGER *sn = X509_REVOKED_get_serialNumber(revoked);
 
             if (!ASN1_INTEGER_cmp(sn, X509_get_serialNumber(cert))) {
-                if (s->loglevel >= APLOG_DEBUG) {
+                if (s->loglevel >= APLOG_INFO) {
                     char *cp = X509_NAME_oneline(issuer, NULL, 0);
                     long serial = ASN1_INTEGER_get(sn);