EXFLAG_SET
if ((x->ex_flags & EXFLAG_SET) != 0) { /* Cert has already been processed */
x->ex_flags |= EXFLAG_SET; /* Indicate that cert has been processed */
if (EVP_MD_is_a(md, SN_sha1) && (cert->ex_flags & EXFLAG_SET) != 0
&& (data->flags & EXFLAG_SET) != 0
crl->flags |= EXFLAG_SET;