#57 pkix validation documented