EXFLAG_FRESHEST
x->ex_flags |= EXFLAG_FRESHEST;
if (((ctx->current_cert->ex_flags | base->flags) & EXFLAG_FRESHEST) == 0)
crl->flags |= EXFLAG_FRESHEST;