DANETLS_USAGE_DANE_TA
if (t->usage != DANETLS_USAGE_DANE_TA || t->selector != DANETLS_SELECTOR_SPKI || t->mtype != DANETLS_MATCHING_FULL || X509_verify(cert, t->spki) <= 0)
#define DANETLS_DANE_TA_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_DANE_TA))
if (usage == DANETLS_USAGE_DANE_TA)
case DANETLS_USAGE_DANE_TA: