p1 = Popen(['openssl', 'verify', '-CApath', capath, '-crl_check_all'],
    stdin=PIPE, stdout=PIPE, stderr=PIPE)
message, error = p1.communicate(certificate)
verified = 'OK' in message and not 'error' in message
How can I verify an X509 certificate in python including a CRL check?