pkiutil verify -certchain <certchain>

Verifies a certificate chain.

pkiutil verify -certchain <certchain> ... -certchain <certchain>

For example:

pkiutil verify -certchain mysubcert.cer -certchain compositeca.pem

See below for a description of each option.

-certchain <certchain>

Include the <certchain> certificate in the verified chain, where <certchain> is the name of a file containing the certificate.

The command will order the chain in the appropriate order and assign the root certificate as the trust anchor according to the RFC 5280 validation procedures.

Mandatory: Yes.