Make it possible to configure a certificate revocation list

The server.pp manifest already had support for that, but the
template does not.