Pass both issuer and subject to verify callback.
Add test cases.