add option to get a certificate or CRL from a URL