Extract an X.509 certificate from a certBag safeBag.
Declared in <openssl/pkcs12.h>
<openssl/pkcs12.h>
X509* PKCS12_SAFEBAG_get1_cert(PKCS12_SAFEBAG const* bag);
New X509 certificate, or NULL on error. Caller must free.