} else { dc = c->decoding;
stan_GetCERTCertificate(NSSCertificate *c, PRBool forceUpdate){    nssDecodedCert *dc;    CERTCertificate *cc;    if (!c->decoding) {	dc = nssDecodedPKIXCertificate_Create(NULL, &c->encoding);	if (!dc) return NULL;	c->decoding = dc;    } else {	dc = c->decoding;    }    cc = (CERTCertificate *)dc->data;    if (cc) {	if (!cc->nssCertificate || forceUpdate) {	    fill_CERTCertificateFields(c, cc, forceUpdate);	} else if (!cc->trust && !c->object.cryptoContext) {	    /* if it's a perm cert, it might have been stored before the	     * trust, so look for the trust again.  But a temp cert can be	     * ignored.	     */	    cc->trust = nssTrust_GetCERTCertTrustForCert(c, cc);	}    }    return cc;}