TS_HASH_LEN
unsigned char cert_hash[TS_HASH_LEN];
if (cid->hash->length == TS_HASH_LEN && !memcmp(cid->hash->data,
cert_hash, TS_HASH_LEN)) {