validation.nss.valid: true and (validation.nss.type: intermediate or validation.nss.type: root) - Censys