223     X509_Ptr certificate(X509_new());  in makeCertRump()  local
224     if (!certificate) {  in makeCertRump()
229     if (!X509_set_version(certificate.get(), 2 /* version 3, but zero-based */)) {  in makeCertRump()
250         !X509_set_serialNumber(certificate.get(), serialNumber.get() /* Don't release; copied */))  in makeCertRump()
256         if (!X509_set_subject_name(certificate.get(), x509_subject->get() /* copied */)) {  in makeCertRump()
270         !X509_set_notBefore(certificate.get(), notBefore.get() /* Don't release; copied */))  in makeCertRump()
281         !X509_set_notAfter(certificate.get(), notAfter.get() /* Don't release; copied */)) {  in makeCertRump()
285     return certificate;  in makeCertRump()
302     auto certificate = std::move(std::get<X509_Ptr>(certificateV));  in makeCert()  local
305     if (!X509_set_pubkey(certificate.get(), const_cast<EVP_PKEY*>(evp_pkey))) {  in makeCert()
317         if (!X509_add1_ext_i2d(certificate.get(), NID_key_usage,  in makeCert()
333         if (!X509_add1_ext_i2d(certificate.get(), NID_basic_constraints,  in makeCert()
342         auto keyidV = makeKeyId(certificate.get());  in makeCert()
354         if (!X509_add1_ext_i2d(certificate.get(), NID_subject_key_identifier,  in makeCert()
361     return certificate;  in makeCert()
400 CertUtilsError signCert(X509* certificate, EVP_PKEY* signing_key) {  in signCert()  argument
402     if (certificate == nullptr) {  in signCert()
406     if (!X509_sign(certificate, signing_key, EVP_sha256())) {  in signCert()
413 std::variant<CertUtilsError, std::vector<uint8_t>> encodeCert(X509* certificate) {  in encodeCert()  argument
414     int len = i2d_X509(certificate, nullptr);  in encodeCert()
422     if (i2d_X509(certificate, &p) < 0) {  in encodeCert()
603 CertUtilsError signCertWith(X509* certificate,  in signCertWith()  argument
611     if (!X509_set1_signature_algo(certificate, algo_obj.get())) {  in signCertWith()
616     int buf_len = i2d_re_X509_tbs(certificate, &cert_buf);  in signCertWith()
627     if (!X509_set1_signature_value(certificate, signature.data(), signature.size())) {  in signCertWith()