@deftypefun {int} {gnutls_pkcs11_get_raw_issuer} (const char * @var{url}, gnutls_x509_crt_t @var{cert}, gnutls_datum_t * @var{issuer}, gnutls_x509_crt_fmt_t @var{fmt}, unsigned int @var{flags}) @var{url}: A PKCS 11 url identifying a token @var{cert}: is the certificate to find issuer for @var{issuer}: Will hold the issuer if any in an allocated buffer. @var{fmt}: The format of the exported issuer. @var{flags}: Use zero or flags from @code{GNUTLS_PKCS11_OBJ_FLAG} . This function will return the issuer of a given certificate, if it is stored in the token. By default only marked as trusted issuers are returned. If any issuer should be returned specify @code{GNUTLS_PKCS11_OBJ_FLAG_RETRIEVE_ANY} in @code{flags} . @strong{Returns:} On success, @code{GNUTLS_E_SUCCESS} (0) is returned, otherwise a negative error value. @strong{Since:} 3.2.7 @end deftypefun