X509_ACERT_get0_notBefore
if (ASN1_GENERALIZEDTIME_print(bp, X509_ACERT_get0_notBefore(x)) == 0)
const ASN1_TIME *X509_ACERT_get0_notBefore(const X509_ACERT *x);