X509_CRL_get_lastUpdate
X509_CRL_get_lastUpdate(x));
ASN1_TIME_print(out, X509_CRL_get_lastUpdate(x));
i = X509_cmp_time(X509_CRL_get_lastUpdate(crl), ptime);
ASN1_TIME *X509_CRL_get_lastUpdate(X509_CRL *crl);