d64cdb7825
to be requested twice for it (once with embedded certificate chain and once without). If such a TSA url signs tokens using multiple, alternating certificates, more than two iterations of token requests might be necessary.