CRLs should NOT use the "descriptive name"

[doktornotor]

Create a cert with some internal CA, add it to revocation list, now create a new cert with identical "Descriptive name". Result: Both certs are marked as revoked in the certificate manager.