Reduce the amount of openssl config we write out.
Fix CRL next update time to one day from now.
Cleanup temp CRL work dir after generating.