CrlGenerator:  Added KicFinder and do open-loop KIC signatures.