X.509 certificate trust path verification