Merge pull request #2538 from reaperhulk/empty-crls-are-beautiful-too

support CRLs with no revoked certificates