ENV_SIGNER_CERT
cert = NCONF_get_string(conf, section, ENV_SIGNER_CERT);
TS_CONF_lookup_fail(section, ENV_SIGNER_CERT);