Added CA to whitelists
Changed certname to clientcert
Custom facts for cacrl and hostcrl settings
Export the CA CRL and collect it on compilers