sk_X509_shift
sk_X509_push(certs, sk_X509_shift(morecerts));
X509_free(sk_X509_shift(peer_certs_no_leaf));