check_cert_usable
return check_cert_usable(s, sig, s->cert->pkeys[idx].x509,
return check_cert_usable(s, sig, x, pkey);