@adrienthebo I don't know how long the store should persist. For normal verification we create a new store each time and during that process grab the most recent version of the CRL from the certificate authority. For license checking, we create a new certificate authority instance, check a bunch of things and then destroy the certificate authority instance. I'm unaware of the lifetime of CertificateAuthority in other cases, so the original `verify` method does not cache the store. Also, `x509_store` is explicitly private.