curl: note that curl does not use a CRL out of the box in our case.