write_certs
ret = write_certs(trusted_dest, &trusted);
ret = write_certs(untrusted_dest, &untrusted);