add changelog and a warning for is_signature_valid on crl (#3861)

* add changelog and a warning

* document this properly
2 files changed