Validate CRL distribution points when parsing X509 resource certificates.