SSL_TFLAG_CERT
case SSL_TFLAG_CERT:
{ str, (int)(sizeof(str) - 1), SSL_TFLAG_CERT | SSL_TFLAG_BOTH, flag }
{ SSL_CERT_FLAG_TLS_STRICT, SSL_TFLAG_CERT }, /* strict */