ca_certificate
ca_certificate(ca, res->host, res->htype, res->action);
int ca_certificate(struct ca *, char *, int, int);