pkcs11_make_cert
if (pkcs11_make_cert(keys[i], certs[j], &k) != 0)
int pkcs11_make_cert(const struct sshkey *,