basicCertificateChainValidator

Performs basic certificate chain validation.

Specifically, these checks are performed:

• every certificate in the chain is signed by the next one,

• signer certificate's subject matches signed certificate's issuer,

• certificates are not expired,

• signer certificate have CERT_SIGN key usage

• if the lst certificate is self-signed (root) and has basic constrains extension

• CA flag is set to true

• number of certificates in the chain satisfies path length constraint

Throws