ku_reject
#define ku_reject(c, u) \
#define ku_reject(c, u) (!(X509_get_key_usage(c) & (u)))
#define ku_reject(x, usage) \