Add option to check CRL instead of X.509 certificate

[mape2k]

This commit add an option to check CRLs instead of X509 certificates. Adding -C as an option to -c/-d will parse files as CRLs and check for Next Update as expiration date