Provide more info when crl-check fails.

OK, a73c236 should take care of that.