Function verify_server_cert_signed_by_trust_anchor 

pub fn verify_server_cert_signed_by_trust_anchor(
    cert: &ParsedCertificate<'_>,
    roots: &RootCertStore,
    intermediates: &[Certificate],
    now: SystemTime,
) -> Result<(), Error>

Verify that the end-entity certificate end_entity is a valid server cert and chains to at least one of the OwnedTrustAnchor in the roots RootCertStore.

intermediates contains all certificates other than end_entity that were sent as part of the server’s Certificate message. It is in the same order that the server sent them and may be empty.