ts_verify_cert
if (!ts_verify_cert(store, untrusted, signer, &chain))
static int ts_verify_cert(X509_STORE *store, STACK_OF(X509) *untrusted,