first revoked cert in the CRL has NID_crl_reason first in list

so we'll use the second revoked because to cover this branch we need to
see a NID that's not NID_crl_reason
1 file changed