Add client certificate revocation checking

[Jan-Schuppik]

Currently, icinga-go-library has no support for CRL-based client certificate revocation. This should be implemented centrally so all Icinga components can use it without duplicating the logic.

Related:

• Allow sources to authenticate using client certificates icinga-notifications#411