Managing certificates and revocation lists