Merge pull request #3236 from c-po/pki-verify
configverify: T6198: add common helper for PKI certificate validation