support retrieving the CRL without authentication, update the URL to "ca.crl" instead of just "ca"