i2d_X509_CERT_AUX
length += i2d_X509_CERT_AUX(a->aux, pp);
int i2d_X509_CERT_AUX(X509_CERT_AUX *a, unsigned char **out);