further modifications to the way certificate chains are validated and stored