ExtractCertificates takes the contents of the file at CF_INSTANCE_CERT, which typically are comprised of two certificates.

Validate takes a group of trusted CA certificates, an intermediate certificate, an identity certificate, and a signing certificate, and makes sure they have the following properties: - The identity certificate is the same as the signing certificate - The identity certificate chains to at least one trusted CA.