X509V3_ADD_OP_MASK
switch (flags & X509V3_ADD_OP_MASK) {
for (op = X509V3_ADD_DELETE + 1; op <= X509V3_ADD_OP_MASK; op++) {