KMF_CERT_VALIDATE_ERR_ISSUER
*result |= KMF_CERT_VALIDATE_ERR_ISSUER;
(*result & KMF_CERT_VALIDATE_ERR_ISSUER) == 0) {