because it points// to a ctx internal. so we do need to keep the ctx aroundreturn&CertificateStore{store:C.SSL_CTX_get_cert_store(c.ctx),ctx:c}}