Certificate Chain Validator

Paste a PEM certificate chain to validate ordering, signatures, and expiry. The chain should be in order: leaf certificate first, then intermediates, then root (optional).