Chain Expiration and Signature

The chain is also checked for validity: e.g. the current time must be within the Not Before and Not After validity ranges of all certificates, and signatures are checked.