TLS_T_CLT
(type == TLS_T_CLT ? "Client" : ""), fn);
TLS_S_CERT_EX, srv ? TLS_T_SRV : TLS_T_CLT);
TLS_S_KEY_EX, srv ? TLS_T_SRV : TLS_T_CLT);
TLS_S_CERT2_EX, srv ? TLS_T_SRV : TLS_T_CLT);
TLS_S_KEY2_EX, srv ? TLS_T_SRV : TLS_T_CLT);