To shorten the arguments, just which CA is used to verify a signed
certificate?