nc_match_single
r = nc_match_single(gen, sub->base);
static int nc_match_single(GENERAL_NAME *sub, GENERAL_NAME *gen);