CERT_DestroyCertificate(STAN_GetCERTCertificate(certs[i]));
CERT_DestroyCertificate(STAN_GetCERTCertificateOrRelease(certs[i]));
transfer_token_certs_to_collection(nssList *certList, NSSToken *token,                                    nssPKIObjectCollection *collection){    NSSCertificate **certs;    PRUint32 i, count;    NSSToken **tokens, **tp;    count = nssList_Count(certList);    if (count == 0) {	return;    }    certs = nss_ZNEWARRAY(NULL, NSSCertificate *, count);    if (!certs) {	return;    }    nssList_GetArray(certList, (void **)certs, count);    for (i=0; i<count; i++) {	tokens = nssPKIObject_GetTokens(&certs[i]->object, NULL);	if (tokens) {	    for (tp = tokens; *tp; tp++) {		if (*tp == token) {		    nssPKIObjectCollection_AddObject(collection, 		                                     (nssPKIObject *)certs[i]);		}	    }	    nssTokenArray_Destroy(tokens);	}	/* *must* be a valid CERTCertificate, came from cache */	CERT_DestroyCertificate(STAN_GetCERTCertificate(certs[i]));    }    nss_ZFreeIf(certs);}