mk_x509_cert
if (!mk_x509_cert(&cert, &pkey, TLS_GENCERT_BITS,
bool mk_x509_cert(X509 **, EVP_PKEY **, int, int, int);