for i, parent := range chain[1:] {
		if parent.PublicKeyAlgorithm != ECDSA {
			continue
		}
		if err := parent.CheckSignature(chain[i].SignatureAlgorithm,
			chain[i].RawTBSCertificate, chain[i].Signature); err != nil {
			return nil, err
		}
	}
	return chain, nil
}

// systemVerify is like Verify, except that it uses CryptoAPI calls
// to build certificate chains and verify them.

	}

	var tbs cryptobyte.String
	// do the same trick again as above to extract the raw
	// bytes for Certificate.RawTBSCertificate
	if !input.ReadASN1Element(&tbs, cryptobyte_asn1.SEQUENCE) {
		return nil, errors.New("x509: malformed tbs certificate")
	}
	cert.RawTBSCertificate = tbs
	if !tbs.ReadASN1(&tbs, cryptobyte_asn1.SEQUENCE) {
		return nil, errors.New("x509: malformed tbs certificate")
	}

	}
	return
}

// A Certificate represents an X.509 certificate.
type Certificate struct {
	Raw                     []byte // Complete ASN.1 DER content (certificate, signature algorithm and signature).
	RawTBSCertificate       []byte // Certificate part of raw ASN.1 DER content.
	RawSubjectPublicKeyInfo []byte // DER encoded SubjectPublicKeyInfo.
	RawSubject              []byte // DER encoded Subject

		{"Certificate.Raw", Field, 0},
		{"Certificate.RawIssuer", Field, 0},
		{"Certificate.RawSubject", Field, 0},
		{"Certificate.RawSubjectPublicKeyInfo", Field, 0},
		{"Certificate.RawTBSCertificate", Field, 0},
		{"Certificate.SerialNumber", Field, 0},
		{"Certificate.Signature", Field, 0},
		{"Certificate.SignatureAlgorithm", Field, 0},
		{"Certificate.Subject", Field, 0},

pkg crypto/x509, type Certificate struct, RawSubject []uint8
pkg crypto/x509, type Certificate struct, RawSubjectPublicKeyInfo []uint8
pkg crypto/x509, type Certificate struct, RawTBSCertificate []uint8
pkg crypto/x509, type Certificate struct, SerialNumber *big.Int
pkg crypto/x509, type Certificate struct, Signature []uint8
pkg crypto/x509, type Certificate struct, SignatureAlgorithm SignatureAlgorithm