DerEncodeTbsCertificate
KMF_RETURN DerEncodeTbsCertificate(KMF_X509_TBS_CERT *, KMF_DATA *);
ret = DerEncodeTbsCertificate(&subj_cert->certificate,