hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6