ossl_x509_check_cert_time
int ossl_x509_check_cert_time(X509_STORE_CTX *ctx, X509 *x, int depth);
if (!ossl_x509_check_cert_time(ctx, xs, n))
if (ossl_x509_check_cert_time(ctx, candidate, -1))
if (ossl_x509_check_cert_time(ctx, obj->data.x509, -1)) {