X509_sign
if (!X509_sign(x, pkey, digest))
if (!X509_sign(ret, pkey, EVP_md5()))
int X509_sign(X509 *x, EVP_PKEY *pkey, const EVP_MD *md);