Merge pull request #3561 from raoulstrackx/raoul/verify_crl_without_time_bp2.7

Backport 2.7: Always revoke certificate on CRL