Confirm that a CRL can be verified against the bundle, and drop it if not. Might happen if the CA cert changes. Also delete expired CRLS, no point in leaving them to pile up in the DB.
Confirm that a CRL can be verified against the bundle, and drop it if
not. Might happen if the CA cert changes. Also delete expired CRLS,
no point in leaving them to pile up in the DB.

Work around for whacky httpd not dying problem. Need to track
that down at some point.

nmc-probe/emulab-nome,nmc-probe/emulab-nome,nmc-probe/emulab-nome,nmc-probe/emulab-nome,nmc-probe/emulab-nome,nmc-probe/emulab-nome,nmc-probe/emulab-nome,nmc-probe/emulab-nome,nmc-probe/emulab-nome,nmc-probe/emulab-nome,nmc-probe/emulab-nome