Provide more info when crl-check fails.

Still nitpicking, can the first element in the list be ``None``?