hx509_certs_filter
hx509_certs_filter (
ret = hx509_certs_filter(context, store, q, &signer);
ret = hx509_certs_filter(context->hx509ctx, certs, q, &result);