Symbol: KU_CRL_SIGN
crypto/libressl/crypto/x509/x509_purp.c
806
if (ku_reject(x, KU_CRL_SIGN))
crypto/libressl/crypto/x509/x509_vfy.c
1682
!(issuer->ex_kusage & KU_CRL_SIGN)) {