nss_ZFreeIf(best.time);
get_best_temp_or_perm(NSSCertificate *ct, NSSCertificate *cp){    nssBestCertificateCB best;    NSSUsage usage;    usage.anyUsage = PR_TRUE;    nssBestCertificate_SetArgs(&best, NULL, &usage, NULL);    if (ct) {	nssBestCertificate_Callback(ct, (void *)&best);    }    if (cp) {	nssBestCertificate_Callback(cp, (void *)&best);    }    return best.cert;}