X509_CRL_digest() - ensure precomputed sha1 hash before returning it