CertificateChain
class CertificateChain
A PlayReady bcert certificate chain, leaf first.
This is the content of a bgroupcert.dat, of the group-certificate slot inside a .prd, and of the SigningCertificateChain a license server returns.
Chains are immutable: prepend and removeLeaf return new chains rather than editing in place, so a chain that has already been verified cannot be changed out from under that result.