int64 notBefore, notAfter, pendingSlop;
int64 notBefore, notAfter, llPendingSlop;
CERT_CheckCertValidTimes(CERTCertificate *c, int64 t, PRBool allowOverride){    int64 notBefore, notAfter, pendingSlop;    SECStatus rv;    /* if cert is already marked OK, then don't bother to check */    if ( allowOverride && c->timeOK ) {        return(secCertTimeValid);    }    rv = CERT_GetCertTimes(c, &notBefore, &notAfter);        if (rv) {	return(secCertTimeExpired); /*XXX is this the right thing to do here?*/    }        LL_I2L(pendingSlop, PENDING_SLOP);    LL_SUB(notBefore, notBefore, pendingSlop);    if ( LL_CMP( t, <, notBefore ) ) {	PORT_SetError(SEC_ERROR_EXPIRED_CERTIFICATE);	return(secCertTimeNotValidYet);    }    if ( LL_CMP( t, >, notAfter) ) {	PORT_SetError(SEC_ERROR_EXPIRED_CERTIFICATE);	return(secCertTimeExpired);    }    return(secCertTimeValid);}