add correct cert revocation list