start switching the CRL entry extensions to be full-fledged classes

first up: CertificateIssuer
7 files changed