CRLs can now be verified