fix CRL response when there is no CRL