certify_cert
j = certify_cert(&x, cfg.ss_cert_file, pkey, x509,
static int certify_cert(X509 **xret, char *infile, EVP_PKEY *pkey,