Introduce an internal version of X509_check_issued()