enforceFactoryProvisionedChainValidity

Whether to enforce timely validity for factory-provisioned certificate chains. Some old (as in: almost certainly not receiving security updates) devices may have expired intermediate certificates. Those will trip a validity check unless this flag is set to false.