x509_crl_compare
failed |= x509_crl_compare("X509_CRL_set_version", ac, der2, der2sz);
failed |= x509_crl_compare("X509_CRL_set_issuer_name", ac, der2,
failed |= x509_crl_compare("X509_CRL_set_lastUpdate", ac, der2, der2sz);
failed |= x509_crl_compare("X509_CRL_set_nextUpdate", ac, der2, der2sz);