Exclude LDAP URLs for CRLs
Explicity set BouncyCastle as Security provider