Add root certificate and CRL