adapt_keyid_ext
if (!adapt_keyid_ext(cert, ext_ctx, "subjectKeyIdentifier", "hash", 1))
if (!adapt_keyid_ext(cert, ext_ctx, "authorityKeyIdentifier",