Harmonise cert-show with the state management

[muep]

• Use the same verification that state.go uses on certificate reception
• Allow passing in the CA root certificate as well as the certificate chain