What is the best way with NSS to find all certificates that have the
same subject name?
The function CERT_FindCertByName expresses the right general idea, but
it only returns one certificate at maximum. Internally, it calls
NSSCryptoContext_FindBestCertificateBySubject, which calls
nssCertificateStore_FindCertificatesBySubject (which is supposed to be
fast, since nssCertificateStore has an nssHash *subject member, which is
a list). Unfortunately this list is filtered with
nssCertificateArray_FindBestCertificate. Of course,
nssCertificateStore_FindCertificatesBySubject is not a public function.