Access Violation when call X509_new in Indy...

How can I import a SHA1 cert into Keystore as PrivateKeyEntry Type instead of trustedCertEntry...