refactored CRL - using light-weight BC API (avoids deprecated X.509 generator)
X509::CRL verification using (only) BC APIs
DSA + SHA1 sounds about just fine ... right?! + the usual cleanup
added some debugging into Cert's verify + housekeeping
simplify esp. avoid the nasty PKeyRSA/DSA #initialize as it's really not necessary
support cleaning up fully (target contains JRuby generated invoker classes)
no infinite_lenght writer for ASN1::Primitive-s (details at #18)