T7 & Teletrust: "Common PKI Specifications for Interoperable Applications", Specification Part 5: Certificate Path Validation, Version 2.0, 20 January 2009.