do_X509_verify
i = do_X509_verify(template_cert, pktmp, vfyopts);
int do_X509_verify(X509 *x, EVP_PKEY *pkey, STACK_OF(OPENSSL_STRING) *vfyopts);