hx509_ca_sign
ret = hx509_ca_sign(context->hx509ctx, tbs, signer, &cert);
hx509_ca_sign (
ret = hx509_ca_sign(context, tbs, signer, &cert);