_hx509_signature_best_before
ret = _hx509_signature_best_before(context,
_hx509_signature_best_before (