better format
add karaf shell keytool:extract-cert to extract certificates from
CRL file