x509_find_expires
time_t x509_find_expires(time_t, struct auth *, struct crl_tree *);
*expires = x509_find_expires(*notafter, a, &crls);
roa->expires = x509_find_expires(cert->notafter, a, &crls);
spl->expires = x509_find_expires(cert->notafter, a, &crls);
aspa->expires = x509_find_expires(cert->notafter, a, &crls);
tak->expires = x509_find_expires(cert->notafter, a, &crls);