Cryptographically validates a pre-built (inline) trust chain.
Verifies every element's signature, checks exp, enforces structural
iss/sub consistency, and optionally binds the root to a known trust
anchor.
The first element must be the leaf EC (self-signed). The last element must
be the trust anchor EC (self-signed). Intermediate elements are subordinate
statements; all but the last require callbacks.fetch to resolve the
intermediate issuer's EC for signature verification.
Warning: When options.trustAnchorUrls is omitted, the chain root is
accepted unconditionally. Callers are responsible for applying their own
root-of-trust verification in that case.
Cryptographically validates a pre-built (inline) trust chain.
Verifies every element's signature, checks
exp, enforces structuraliss/subconsistency, and optionally binds the root to a known trust anchor.The first element must be the leaf EC (self-signed). The last element must be the trust anchor EC (self-signed). Intermediate elements are subordinate statements; all but the last require
callbacks.fetchto resolve the intermediate issuer's EC for signature verification.Warning: When
options.trustAnchorUrlsis omitted, the chain root is accepted unconditionally. Callers are responsible for applying their own root-of-trust verification in that case.