CrlGenerator: Use two passes (works).