HX509_QUERY_KU_DIGITALSIGNATURE
q->match |= HX509_QUERY_KU_DIGITALSIGNATURE;
if (q->match & HX509_QUERY_KU_DIGITALSIGNATURE)
HX509_QUERY_KU_DIGITALSIGNATURE);