CRL generation module
replace getUpdateTimes/setUpdateTimes with getLastUpdate/setLastUpdate and getNextUpdate/setNextUpdate, because the semantics don't quite match that of crt:getLifetime, which it was copied from
refactor xx_add to be more linear
add extra argument to be consumed by ellipsis in overloaded macros
Merge branch 'kunkku-crl'
hookup explicit tostring methods for CRT and CSR objects (still need to refactor PKey to allow specifying public, private or both)
method for adding arbitrary certificate extensions
module for custom certificate extensions