Make tls1_check_chain return a set of flags indicating checks passed