Don't add XNU includes to cppcheck invocation
Rewrite ssl_x509_subject_cn() error handling