Fix CRL time comparison.