diff --git a/SConstruct b/SConstruct
index c314ede..3a82e4a 100644
--- a/SConstruct
+++ b/SConstruct
@@ -469,6 +469,8 @@
   env.Append(CPPDEFINES=['SERF_NO_SSL_X509_GET0_NOTAFTER'])
 if not conf.CheckFunc('X509_STORE_CTX_get0_chain'):
   env.Append(CPPDEFINES=['SERF_NO_SSL_X509_GET0_CHAIN'])
+if not conf.CheckFunc('ASN1_STRING_get0_data'):
+  env.Append(CPPDEFINES=['SERF_NO_SSL_ASN1_STRING_GET0_DATA'])
 if conf.CheckFunc('CRYPTO_set_locking_callback'):
   env.Append(CPPDEFINES=['SERF_HAVE_SSL_LOCKING_CALLBACKS'])
 if conf.CheckFunc('OPENSSL_malloc_init', '#include <openssl/crypto.h>'):
diff --git a/buckets/ssl_buckets.c b/buckets/ssl_buckets.c
index fdf880f..4ae0d8a 100644
--- a/buckets/ssl_buckets.c
+++ b/buckets/ssl_buckets.c
@@ -65,6 +65,9 @@
 #define X509_STORE_CTX_get0_chain(store) (X509_STORE_CTX_get_chain(store))
 #endif
 
+#ifdef SERF_NO_SSL_ASN1_STRING_GET0_DATA
+#define ASN1_STRING_get0_data(asn1string) (ASN1_STRING_data(asn1string))
+#endif
 
 /*
  * Here's an overview of the SSL bucket's relationship to OpenSSL and serf.
@@ -2950,7 +2953,7 @@
                               apr_status_t parse_error)
 {
     apr_time_exp_t xt = { 0 };
-    void *data;
+    const void *data;
     char *date;
     int len;
     char tz;
@@ -2959,7 +2962,7 @@
         return 0;
 
     len = ASN1_STRING_length(asn1_time);
-    data = ASN1_STRING_data(asn1_time);
+    data = ASN1_STRING_get0_data(asn1_time);
     date = apr_pstrndup(scratch_pool, data, len);
 
     if (6 > sscanf(date, "%4d%2d%2d%2d%2d%2d%c",