Initial support for CRL path validation. This supports distinct certificate