Relax X.509 CRL verification if the issuer is a CA