update example certs, CRLs