ca_by_issuer
X509 *ca_by_issuer(X509_STORE *, X509_NAME *, struct iked_static_id *);
if ((cert = ca_by_issuer(store->ca_certs, subject, id)) != NULL) {