sk_X509_shift
X509_free(sk_X509_shift(chain2));
X509_free(sk_X509_shift(chain)); /* remove leaf (EE) cert */
X509_free(sk_X509_shift(ctx->untrusted));
X509_free(sk_X509_shift(ctx->untrusted));
while ((x = sk_X509_shift(ocerts)) != NULL) {
&& sk_X509_shift(chain) != NULL
&& sk_X509_shift(chain) != NULL
x = sk_X509_shift(chain);
s->session->peer = sk_X509_shift(sk);