X509_CRL_check_suiteb
int rv = X509_CRL_check_suiteb(crl, ikey, ctx->param->flags);
int X509_CRL_check_suiteb(X509_CRL *crl, EVP_PKEY *pk, unsigned long flags);