Crl verification