cert_status_cb
SSL_CTX_set_tlsext_status_cb(ctx, cert_status_cb);
static int cert_status_cb(SSL * s, void *arg);