6869739: Cannot check revocation of single certificate without validating the entire chain Reviewed-by: xuelei
