crl:getLastUpdate: return correct timestamp