valid_aspa
aspa->valid = valid_aspa(fn, cert, aspa);
int valid_aspa(const char *, struct cert *, struct aspa *);