CrlGenerator: Put CRL version in header ctor.  Use label in RevisionAction.  Made numerous members private.  Move some pass 1/2 logic out of instances.