Add CRL validation