X509_ACERT_verify
int X509_ACERT_verify(X509_ACERT *a, EVP_PKEY *r);
if (!TEST_int_gt(X509_ACERT_sign(acert, pkey, EVP_sha256()), 0) || !TEST_int_eq(X509_ACERT_verify(acert, pkey), 1))