Fixes for new CRL/cert callbacks. Update CRL processing code to use new