certificate_is_self_signed
ret = certificate_is_self_signed(context, c, &selfsigned);
ret = certificate_is_self_signed(context, signer->data, &selfsigned);