better format
consider also the deltaCrlUris in self-signed certificate