X509_PURPOSE_TIMESTAMP_SIGN
if (X509_check_purpose(signer, X509_PURPOSE_TIMESTAMP_SIGN, 0) != 1) {
X509_PURPOSE_TIMESTAMP_SIGN) == 0)
.purpose = X509_PURPOSE_TIMESTAMP_SIGN,