crypto_retrieve_X509_sans
return crypto_retrieve_X509_sans(context, plgctx, reqctx,
retval = crypto_retrieve_X509_sans(context, cd->plgctx, cd->reqctx,