X509CRLImpl: fix getRevokedCertificate by serial

The getRevokedCertificate(BigInteger) was scanning nonIndirectEntries,
but it didn't check "isIndirectCRL" first.

Change-Id: Ib1ca31d563c6bd9c62901a9eae9bea1bd92a1d9b
1 file changed