code: func (l *Lint) Execute(cert *x509.Certificate) *LintResult {
  	if l.Source == CABFBaselineRequirements && !util.IsServerAuthCert(cert) {
  		return &LintResult{Status: NA}
  	}
  	if !l.Lint.CheckApplies(cert) {
  		return &LintResult{Status: NA}
  	} else if !l.CheckEffective(cert) {
  		return &LintResult{Status: NE}
  	}
  	res := l.Lint.Execute(cert)
  	return res
  }
docs: // Execute runs the lint against a certificate. For lints that are
  // sourced from the CA/B Forum Baseline Requirements, we first determine
  // if they are within the purview of the BRs. See LintInterface for details
  // about the other methods called. The ordering is as follows:
  //
  // CheckApplies()
  // CheckEffective()
  // Execute()