Optimization: we don't need to verify signatures on certs if they're certs we already have and have verified.