I'm already partially supporting this but need to do few changes.

The intermediate certificates returned when making the request are checked. The system will use the earliest expiration time.

However, the root certificate (which is stored locally) is not checked.

I'll add the feature and update the documentation.

Thanks.