check_purpose_crl_sign
{X509_PURPOSE_CRL_SIGN, X509_TRUST_COMPAT, 0, check_purpose_crl_sign, "CRL signing", "crlsign", NULL},
static int check_purpose_crl_sign(const X509_PURPOSE *xp, const X509 *x,