openssl 3.0 - id2_x509() now fails

[Ken Goldman]

I have an application where I have to create a partial x509 certificate.  It gets sent to an HSM, which fills in the public key and signs it.

I was calling

	X509_new
	X509_set_version
	X509_set_issuer_name
	X509_get_notBefore
	X509_get_notAfter
	X509_set_subject_name
	X509_EXTENSION_create_by_OBJ

and then
	i2d_x509
to send the serialized partial certificate to the HSM.

This worked in 1.0.1, 1.0.2, 1.1.1, but fails in 3.0.0.

In debugging, even this fails.

	X509_new
	i2d_x509

Suggestions?