kmf_get_cert_validity
extern KMF_RETURN kmf_get_cert_validity(const KMF_DATA *, time_t *, time_t *);
ret = kmf_get_cert_validity(&certlist[i].certificate,
rv = kmf_get_cert_validity(cert, &t_notbefore, &t_notafter);