Added alternative implementation of verify_chain

This change adds the alternative implementation of verify_chain
(actually, verify_cert now) that is being discussed in
https://github.com/pyca/pyopenssl/pull/155. This implementation focuses
on not adding any additional logic atop OpenSSL and instead exposes the
API directly.