IDP_INVALID
if ((crl->idp_flags & IDP_INVALID) != 0)
if ((crl->idp_flags & IDP_INVALID) != 0 && !verify_cb_crl(ctx, X509_V_ERR_INVALID_EXTENSION))
crl->idp_flags |= IDP_INVALID;
crl->idp_flags |= IDP_INVALID;