X509_PURPOSE_TIMESTAMP_SIGN
if (X509_check_purpose(signer, X509_PURPOSE_TIMESTAMP_SIGN, 0) != 1) {
X509_STORE_CTX_set_purpose(cert_ctx, X509_PURPOSE_TIMESTAMP_SIGN);
{ X509_PURPOSE_TIMESTAMP_SIGN, X509_TRUST_TSA, 0,