Verify that a certificate hasn't been revoked

This stack overflow post recommends using
`CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT`:

https://stackoverflow.com/a/22097069

libs/mbedtls/mbedtls_stubs.c

@@ -319,7 +319,7 @@ static int verify_callback(void* param, mbedtls_x509_crt *crt, int depth, uint32
 	}
 	PCCERT_CHAIN_CONTEXT chain_context = {0};
 	CERT_CHAIN_PARA parameters = {0};
-	if(!CertGetCertificateChain(NULL, primary_context, NULL, store, &parameters, 0, NULL, &chain_context)) {
+	if(!CertGetCertificateChain(NULL, primary_context, NULL, store, &parameters, CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT, NULL, &chain_context)) {
 		CertFreeCertificateContext(primary_context);
 		CertCloseStore(store, 0);
 		return MBEDTLS_ERR_X509_FATAL_ERROR;