embed CRL serial number and signature fields