output expiration timestamp of crlset