cert_purpose
enum cert_purpose purpose; /* EE, BGPsec, CA, or TA */
const char *purpose2str(enum cert_purpose);
purpose2str(enum cert_purpose purpose)
