Actually check the CRL