pub const XCN_CRL_REASON_CA_COMPROMISE: CRLRevocationReason = 2i32;