Chapter 22. Restricting an application to trust only a subset of certificates