HX509_QUERY_MATCH_SUBJECT_KEY_ID
q.match = HX509_QUERY_MATCH_SUBJECT_KEY_ID;
if (q->match & HX509_QUERY_MATCH_SUBJECT_KEY_ID) {