I am using SecPolicyCreateSSL() and kSecMatchPolicy to define a match criteria for SSL certificate and then using SecItemCopyMatching to find SSL certificate\'s identity from ke