Add `openssl ca -revoke <certfile>' facility which revokes a certificate