X509_policy_check
ret = X509_policy_check(&ctx->tree, &ctx->explicit_policy, ctx->chain,
int X509_policy_check(X509_POLICY_TREE **ptree, int *pexplicit_policy,