X509_get0_notBefore
LCRYPTO_USED(X509_get0_notBefore);
const ASN1_TIME *X509_get0_notBefore(const X509 *x);
LCRYPTO_ALIAS(X509_get0_notBefore);
if ((at = X509_get0_notBefore(cert->x509)) == NULL) {