New 'openssl ca -status <serial>' and 'openssl ca -updatedb'