ossl_cms_get1_certs_ex
if (!ossl_cms_get1_certs_ex(cms, &certs))
int ossl_cms_get1_certs_ex(CMS_ContentInfo *cms, STACK_OF(X509) **certs);
if (!ossl_cms_get1_certs_ex(cms, &untrusted))