feature #1790: bug in crl check function