Moved CRL/OCSP checking to a dedicated plugin called revocation