X509_check_trust
if (X509_check_trust(x, NID_OCSP_sign, 0) !=
ok = X509_check_trust(x, ctx->param->trust, 0);
int X509_check_trust(X509 *x, int id, int flags);