Validate: - public key matches given public key - doctype issued - Signature is valid - Certificate chain is valid
