X509_cmp_time: only return 1, 0, -1.