ASN.1 BOOLEAN: when set, the CRL covers CA certificates only.
Declared in <openssl/x509v3.h>
<openssl/x509v3.h>
int onlyCA;