pub const CERT_TRUST_HAS_EXACT_MATCH_ISSUER: u32 = 1u32;