cc->trust = nssTrust_GetCERTCertTrustForCert(c, cc);
fill_CERTCertificateFields(NSSCertificate *c, CERTCertificate *cc){    NSSTrust *nssTrust;    NSSCryptoContext *context = c->object.cryptoContext;    nssCryptokiInstance *instance = get_cert_instance(c);    /* fill other fields needed by NSS3 functions using CERTCertificate */    if (!cc->nickname && c->nickname) {	PRStatus nssrv;	int len = nssUTF8_Size(c->nickname, &nssrv);	cc->nickname = PORT_ArenaAlloc(cc->arena, len);	memcpy(cc->nickname, c->nickname, len-1);	cc->nickname[len-1] = '\0';    }    if (context) {	/* trust */	nssTrust = nssCryptoContext_FindTrustForCertificate(context, c);	if (nssTrust) {	    cc->trust = cert_trust_from_stan_trust(nssTrust, cc->arena);	    nssPKIObject_Destroy(&nssTrust->object);	} else {	    cc->trust = nssTrust_GetCERTCertTrustForCert(c, cc);	}    } else if (instance) {	/* trust */	cc->trust = nssTrust_GetCERTCertTrustForCert(c, cc);	/* slot */	cc->slot = instance->token->pk11slot;	/* pkcs11ID */	cc->pkcs11ID = instance->handle;    }     /* database handle is now the trust domain */    cc->dbhandle = c->object.trustDomain;    /* subjectList ? */    /* pointer back */    cc->nssCertificate = c;}