Cert chain verification is useable by now.

Whether Steve is still working on 'proper' verification is up to
him to decide ...