Reencode with X509_CRL_ctx_sign too.