fn verify(subject: Certificate, issuer: Certificate, now_sec: i64) !void
subject: Certificate,
issuer: Certificate,
now_sec: i64,