: New validation logic was implemented to ensure trust anchors are proper CA certificates with valid extensions.