X509/LDAP certificate and revocation list client