fixed a bug in the CRL generation code, where the issuerDN was put in reversed order. Also added a NextUpdate timestamp (1 year in the future)