“Certificate Revocation List (CRL): The first stage in checking whether a certificate is valid, no matter the scenario, is to check the CRL.”