1. 可以获取x509证书的ct和ev状态。2. hostname不匹配，不认为是非法证书。

platform/include/internal/ssl_utils.h

@@ -164,6 +164,8 @@ int ssl_x509_is_valid(X509 *);
 char * ssl_x509_to_str(X509 *);
 char * ssl_x509_to_pem(X509 *);
 void ssl_x509_refcount_inc(X509 *);
+char* ssl_x509_get_extension(X509 *cert, int ext_NID);
+int ssl_x509_is_ev(const char* policy_oid);
 
 int ssl_x509chain_load(X509 **, STACK_OF(X509) **, const char *);
 void ssl_x509chain_use(SSL_CTX *, X509 *, STACK_OF(X509) *);