EXFLAG_FRESHEST
crl->flags |= EXFLAG_FRESHEST;
x->ex_flags |= EXFLAG_FRESHEST;
if (!((ctx->current_cert->ex_flags | base->flags) & EXFLAG_FRESHEST))