SignatureValue     asn1.BitString
}

// HasExpired reports whether certList should have been updated by now.
func (certList *CertificateList) HasExpired(now time.Time) bool {
	return !now.Before(certList.TBSCertList.NextUpdate)
}

// TBSCertificateList represents the ASN.1 structure of the same name. See RFC
// 5280, section 5.1.
//
// Deprecated: x509.RevocationList should be used instead.
type TBSCertificateList struct {

	certList, err := ParseDERCRL(derBytes)
	if err != nil {
		t.Fatal(err)
	}
	if !certList.TBSCertList.NextUpdate.IsZero() {
		t.Errorf("NextUpdate is not the zero value")
	}
}

func TestParsePEMCRL(t *testing.T) {
	pemBytes := fromBase64(pemCRLBase64)
	certList, err := ParseCRL(pemBytes)
	if err != nil {

	// indicates the issuance date of the CRL.
	ThisUpdate time.Time
	// NextUpdate is used to populate the nextUpdate field in the CRL, which
	// indicates the date by which the next CRL will be issued. NextUpdate
	// must be greater than ThisUpdate.
	NextUpdate time.Time

	// Extensions contains raw X.509 extensions. When creating a CRL,

pkg crypto/x509, type RevocationList struct
pkg crypto/x509, type RevocationList struct, ExtraExtensions []pkix.Extension
pkg crypto/x509, type RevocationList struct, NextUpdate time.Time
pkg crypto/x509, type RevocationList struct, Number *big.Int
pkg crypto/x509, type RevocationList struct, RevokedCertificates []pkix.RevokedCertificate

	rl.ThisUpdate, err = parseTime(&tbs)
	if err != nil {
		return nil, err
	}
	if tbs.PeekASN1Tag(cryptobyte_asn1.GeneralizedTime) || tbs.PeekASN1Tag(cryptobyte_asn1.UTCTime) {
		rl.NextUpdate, err = parseTime(&tbs)
		if err != nil {
			return nil, err
		}
	}

	if tbs.PeekASN1Tag(cryptobyte_asn1.SEQUENCE) {
		var revokedSeq cryptobyte.String

		{"RevocationList.AuthorityKeyId", Field, 19},
		{"RevocationList.Extensions", Field, 19},
		{"RevocationList.ExtraExtensions", Field, 15},
		{"RevocationList.Issuer", Field, 19},
		{"RevocationList.NextUpdate", Field, 15},
		{"RevocationList.Number", Field, 15},
		{"RevocationList.Raw", Field, 19},
		{"RevocationList.RawIssuer", Field, 19},
		{"RevocationList.RawTBSRevocationList", Field, 19},

pkg crypto/x509/pkix, type TBSCertificateList struct, Extensions []Extension
pkg crypto/x509/pkix, type TBSCertificateList struct, Issuer RDNSequence
pkg crypto/x509/pkix, type TBSCertificateList struct, NextUpdate time.Time
pkg crypto/x509/pkix, type TBSCertificateList struct, Raw asn1.RawContent
pkg crypto/x509/pkix, type TBSCertificateList struct, RevokedCertificates []RevokedCertificate