fn check_issuer_independent_properties( cert: &Cert<'_>, time: UnixTime, role: Role, sub_ca_count: usize, eku: ExtendedKeyUsage, ) -> Result<(), Error>