apply_skip_certs
ok = apply_skip_certs(constraints->requireExplicitPolicy,
apply_skip_certs(constraints->inhibitPolicyMapping,
ok = apply_skip_certs(inhibit_any_policy_ext, inhibit_any_policy);