ENV_SIGNER_CERT
cert = NCONF_get_string(conf, section, ENV_SIGNER_CERT);
ts_CONF_lookup_fail(section, ENV_SIGNER_CERT);