return nssCertificate_AddRef(rvCert);
return rvCert;
nssTrustDomain_GetCertForIssuerAndSNFromCache(  NSSTrustDomain *td,  NSSDER *issuer,  NSSDER *serial){    NSSCertificate certkey;    NSSCertificate *rvCert = NULL;    cache_entry *ce;    certkey.issuer.data = issuer->data;    certkey.issuer.size = issuer->size;    certkey.serial.data = serial->data;    certkey.serial.size = serial->size;#ifdef DEBUG_CACHE    log_item_dump("looking for cert by issuer/sn, issuer", issuer);    log_item_dump("                               serial", serial);#endif    PZ_Lock(td->cache->lock);    ce = (cache_entry *)nssHash_Lookup(td->cache->issuerAndSN, &certkey);    if (ce) {	ce->hits++;	ce->lastHit = PR_Now();	rvCert = ce->entry.cert;#ifdef DEBUG_CACHE	PR_LOG(s_log, PR_LOG_DEBUG, ("... found, %d hits", ce->hits));#endif    }    PZ_Unlock(td->cache->lock);    return nssCertificate_AddRef(rvCert);}