ssl_cert_new
if ((ret->cert = ssl_cert_new(SSL_PKEY_NUM + ret->sigalg_list_len)) == NULL) {
__owur CERT *ssl_cert_new(size_t ssl_pkey_num);