*/ rv = CERT_VerifyCertNow (issuerCert->dbhandle, issuerCert, PR_TRUE, certUsageAnyCA, NULL);
cert_trav_callback(CERTCertificate *cert, SECItem *k, void *data){	int isSigningCert;	int list_certs = 1;	char *name, *issuerCN, *expires;	CERTCertificate *issuerCert = NULL;	if(data) {		list_certs = *((int*)data);	}  if (cert->nickname)    {    name = cert->nickname;	isSigningCert = cert->nsCertType & NS_CERT_TYPE_OBJECT_SIGNING;    issuerCert = CERT_FindCertIssuer (cert, PR_Now(), certUsageObjectSigner);    issuerCN = CERT_GetCommonName (&cert->issuer);    if (!isSigningCert && list_certs == 1)      return (SECSuccess);    /* Add this name or email to list */    if (name)      {      int rv;      num_trav_certs++;		if(list_certs == 2) {			PR_fprintf(outputFD, "%s ", isSigningCert ? "*" : " ");		}		PR_fprintf(outputFD, "%s\n", name);      if (list_certs == 1)        {		if(issuerCert == NULL) {			PR_fprintf(outputFD,				"\t++ Error ++ Unable to find issuer certificate\n");			return SECSuccess; /*function was a success even if cert is bogus*/		}        if (issuerCN == NULL)          PR_fprintf(outputFD, "    Issued by: %s\n", issuerCert->nickname);        else          PR_fprintf(outputFD,			"    Issued by: %s (%s)\n", issuerCert->nickname, issuerCN);         expires = DER_UTCDayToAscii (&cert->validity.notAfter);        if (expires)          PR_fprintf(outputFD, "    Expires: %s\n", expires);        rv = CERT_CertTimesValid (cert);        if (rv != SECSuccess)          PR_fprintf(outputFD, "    ++ Error ++ THIS CERTIFICATE IS EXPIRED\n");        if (rv == SECSuccess)          {          rv = CERT_VerifyCertNow (cert->dbhandle, cert,                    PR_TRUE, certUsageObjectSigner, NULL);          if (rv != SECSuccess)            {            rv = PORT_GetError();            PR_fprintf(outputFD,				"    ++ Error ++ THIS CERTIFICATE IS NOT VALID (%s)\n",				secErrorString(rv));            }          }        expires = DER_UTCDayToAscii (&issuerCert->validity.notAfter);        if (expires == NULL) expires = "(unknown)";        rv = CERT_CertTimesValid (issuerCert);        if (rv != SECSuccess)          PR_fprintf(outputFD,			"    ++ Error ++ ISSUER CERT \"%s\" EXPIRED ON %s\n",              issuerCert->nickname, expires);        if (rv == SECSuccess)          {		  /*          rv = CERT_VerifyCertNow (issuerCert->dbhandle, issuerCert,                     PR_TRUE, certUsageVerifyCA, NULL);		    */          rv = CERT_VerifyCertNow (issuerCert->dbhandle, issuerCert,                     PR_TRUE, certUsageAnyCA, NULL);          if (rv != SECSuccess)            {            rv = PORT_GetError();            PR_fprintf(outputFD,				"    ++ Error ++ ISSUER CERT \"%s\" IS NOT VALID (%s)\n", issuerCert->nickname, secErrorString(rv));            }          }        }      }    }  return (SECSuccess);}