start of documentation for TBSCertificate verify_certificate_chain now checks the basicConstraints cA flag; compiles, but not very well tested atm. Rev: lib/modules/Tools.pmod/X509.pmod:1.34