revocation: Allow CRLs to be encoded in PEM format