Document additions for X509 chain verification from HEAD