ct_strict
return SSL_CTX_set_ct_validation_callback(ctx, ct_strict, NULL);
return SSL_set_ct_validation_callback(s, ct_strict, NULL);