X509_check_trust
if (X509_check_trust(x, X509_TRUST_OCSP_SIGN, 0) !=
int X509_check_trust(X509 *x, int id, int flags);
ok = X509_check_trust(x, ctx->param->trust, 0);