x509_verify_asn1_time_to_time_t
time_t x509_verify_asn1_time_to_time_t(const ASN1_TIME *atime, int notafter);
cert->not_before = x509_verify_asn1_time_to_time_t(X509_get_notBefore(cert), 0);
cert->not_after = x509_verify_asn1_time_to_time_t(X509_get_notAfter(cert), 1);
if ((cert_time = x509_verify_asn1_time_to_time_t(ctm, is_notafter)) ==