hx509_cert_get_notBefore
tbs->notBefore = hx509_cert_get_notBefore(cert);
hx509_cert_get_notBefore (hx509_cert /*p*/);