TLS_S_CERT_EX
TLS_S_CERT_EX, srv ? TLS_T_SRV : TLS_T_CLT);
bitset(TLS_S_CERT_EX, status), TLS_S_CERT_OK, srv);