check_cert
rv = check_cert(info->x509, issuer, subject, serial, &match);
if (check_cert(xcert, issuer, subject, serial, &match) != KMF_OK ||