Add a simple CRL checker that can be pointed at any SSL socket