OpenSSL and certificate revocation