PKCS#7: Verify internal certificate chain