X509_CERT_HASH_LEN
return memcmp(a->hash, b->hash, X509_CERT_HASH_LEN);
unsigned char hash[X509_CERT_HASH_LEN];