fix(crl): derive missing CDP status from admin toggle in handler

When a certificate has no crlDistributionPoints extension, the handler now
maps the status to DISABLED when external CRL validation is turned off,
instead of always setting MISSING. This makes the source status align with
the configured policy before signature validation runs.

Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>

Author: vitormattos

lib/Handler/CertificateEngine/AEngineHandler.php

@@ -193,7 +193,10 @@ private function addCrlValidationInfo(array &$certData, string $certPem): void {
 				$certData['crl_revoked_at'] = $crlDetails['revoked_at'];
 			}
 		} else {
-			$certData['crl_validation'] = CrlValidationStatus::MISSING;
+			$externalValidationEnabled = $this->appConfig->getValueBool(Application::APP_ID, 'crl_external_validation_enabled', true);
+			$certData['crl_validation'] = $externalValidationEnabled
+				? CrlValidationStatus::MISSING
+				: CrlValidationStatus::DISABLED;
 			$certData['crl_urls'] = [];
 		}
 	}