certificate.verify_chain() generates exceps rather than returning true/false