ey: The issuer's private key. :param bytes digest: The digest method to sign the CRL with. r