Add first user-validated certificate with unknow_ca to peer chain in order to generate valid/valid_peer callback