encodedValue.data = NULL;
CERT_FindSubjectKeyIDExtension(CERTCertificate *cert, SECItem *retItem){    SECItem encodedValue;    SECStatus rv;    encodedValue.data = NULL;    rv = cert_FindExtension	 (cert->extensions, SEC_OID_X509_SUBJECT_KEY_ID, &encodedValue);    if (rv != SECSuccess)	return (rv);    rv = SEC_ASN1DecodeItem (NULL, retItem, SEC_OctetStringTemplate,			     &encodedValue);    PORT_Free (encodedValue.data);    return (rv);}