X509_add1_reject_object
X509_add1_reject_object(x, sk_ASN1_OBJECT_value(reject, i));
int X509_add1_reject_object(X509 *x, const ASN1_OBJECT *obj);