X509_SIG_INFO_TLS
*flags = X509_SIG_INFO_TLS | X509_SIG_INFO_VALID;
flags |= X509_SIG_INFO_TLS;
if ((flags & X509_SIG_INFO_TLS) == 0)