CMS_NOINTERN
CMS_set1_signers_certs(cms, idctx->trustedCAs, CMS_NOINTERN);
CMS_set1_signers_certs(cms, idctx->intermediateCAs, CMS_NOINTERN);
flags |= CMS_NOINTERN;
if (si->signer != NULL || (flags & CMS_NOINTERN))