dane_match_cert
if (cert != NULL && (matched = dane_match_cert(ctx, cert, depth)) < 0)
matched = dane_match_cert(ctx, ctx->cert, 0);