cert = STAN_GetCERTCertificate(*ci);
cert = STAN_GetCERTCertificateOrRelease(*ci);
CERT_CreateSubjectCertList(CERTCertList *certList, CERTCertDBHandle *handle,			   SECItem *name, int64 sorttime, PRBool validOnly){    NSSCryptoContext *cc;    NSSCertificate **tSubjectCerts, **pSubjectCerts;    NSSCertificate **ci;    CERTCertificate *cert;    NSSDER subject;    PRBool myList = PR_FALSE;    cc = STAN_GetDefaultCryptoContext();    NSSITEM_FROM_SECITEM(&subject, name);    /* Collect both temp and perm certs for the subject */    tSubjectCerts = NSSCryptoContext_FindCertificatesBySubject(cc,                                                               &subject,                                                               NULL,                                                               0,                                                               NULL);    pSubjectCerts = NSSTrustDomain_FindCertificatesBySubject(handle,                                                             &subject,                                                             NULL,                                                             0,                                                             NULL);    if (!tSubjectCerts && !pSubjectCerts) {	return NULL;    }    if (certList == NULL) {	certList = CERT_NewCertList();	myList = PR_TRUE;	if (!certList) goto loser;    }    /* Iterate over the matching temp certs.  Add them to the list */    ci = tSubjectCerts;    while (ci && *ci) {	cert = STAN_GetCERTCertificate(*ci);        if (cert) {	    add_to_subject_list(certList, cert, validOnly, sorttime);        }	ci++;    }    /* Iterate over the matching perm certs.  Add them to the list */    ci = pSubjectCerts;    while (ci && *ci) {	cert = STAN_GetCERTCertificate(*ci);        if (cert) {	    add_to_subject_list(certList, cert, validOnly, sorttime);        }	ci++;    }    nss_ZFreeIf(tSubjectCerts);    nss_ZFreeIf(pSubjectCerts);    return certList;loser:    nss_ZFreeIf(tSubjectCerts);    nss_ZFreeIf(pSubjectCerts);    if (myList && certList != NULL) {	CERT_DestroyCertList(certList);    }    return NULL;}