A certificate status may be VALID/EXPIRED/REVOKED/INVALID so far.
Probably need to use UNKNOWN instead of INVALID (even if UNKNOWN means invalid as cannot be sure is valid... So for now keeping INVALID instead of UNKNOWN