code: func (d *Accessor) GetRevokedAndUnexpiredCertificatesByLabel(label string) (crs []certdb.CertificateRecord, err error) {
  	err = d.checkDB()
  	if err != nil {
  		return nil, err
  	}
  
  	err = d.db.Select(&crs, fmt.Sprintf(d.db.Rebind(selectAllRevokedAndUnexpiredWithLabelSQL), sqlstruct.Columns(certdb.CertificateRecord{})), label)
  	if err != nil {
  		return nil, wrapSQLError(err)
  	}
  
  	return crs, nil
  }
docs: // GetRevokedAndUnexpiredCertificatesByLabel gets all revoked and unexpired certificate from db (for CRLs) with specified ca_label.