X509_PURPOSE_SSL_CLIENT
{X509_PURPOSE_SSL_CLIENT, X509_TRUST_SSL_CLIENT, 0, check_purpose_ssl_client, "SSL client", "sslclient", NULL},
.purpose = X509_PURPOSE_SSL_CLIENT,