make sure the trusted cert's hrn is a prefix of the signed cert's hrn
make sure the trusted cert's hrn is a prefix of the signed cert's hrn

yippeecw/sfa,onelab-eu/sfa,yippeecw/sfa,onelab-eu/sfa,yippeecw/sfa,onelab-eu/sfa