Verify signatures and certificates

Paste the PEM version of an X.509 certificate below. The system checks that it was signed by a CA backed by an HSM and validates it against OCSP / CRL.