Track ASN1_TIME structures in a list.

This will allow us to eventually call X509_cmp_time() using them and
user provided dates for more general comparison.
Free stack of certs.

Also, if PKCS7_get0_signers() returns NULL, break.