NS_SSL_CA
return ca_ret != 5 || (x->ex_nscert & NS_SSL_CA) != 0;
#define NS_ANY_CA (NS_SSL_CA | NS_SMIME_CA | NS_OBJSIGN_CA)