find_cert
ret = find_cert(context, ctx->id, q, &ctx->id->cert);
if (exclude && find_cert(exclude, x509)) {
if (find_cert(tree, x509)) {