Superfluous const_cast - you generally (but not always) use it to cast const-ness away, not to add const-ness.

Also, is there a reason for Certificate::VerifySpkac() to return an int rather than a bool?