for _, chain := range chains {
        root := chain[len(chain)-1]
        vendor, err = cert.VendorIDFromCertificate(root)
        if err != nil {
            logging.Log().Warnf("no vendorID in SAN for %s", root.Subject.String())