See the file man3/ne_ssl_clicert_read.3.