gs</i> contains <b>OCSP_PARTIAL_CHAIN</b> it takes intermediate CA certificates in <i>st</i> as trust anchors. For more details, see the description of <b>X509_V_FLAG_PARTIAL_CHAIN</b> in <a href="../man3/X509_VERIFY_PARAM_set_flags.html">&quot;VERIFICATION FLAGS&quot; in X509_VERIFY_PARAM_set_flags(3)</a>. If <i>flags</i> contains <b>OCSP_NOCHAIN</b> it ignores all certificates in <i>certs</i> and in <i>bs</i>, else it takes them as untrusted intermediate CA certificates and uses them for constructing the 