Crl: nextUpdate and thisUpdate are optional

nextUpdate and thisUpdate are optional

can we guard with `!crl.NextUpdate.IsZero()`

_Originally posted by @arkodg in https://github.com/envoyproxy/gateway/pull/7199#discussion_r2479887775_
            