Типы:
        PCERT_SIMPLE_CHAINARRAY = ^CERT_SIMPLE_CHAINARRAY;
        CERT_SIMPLE_CHAINARRAY = array[0..99] of CERT_SIMPLE_CHAIN;

        Переменные:
        EnhkeyUsage: CERT_ENHKEY_USAGE;
        CertUsage: CERT_USAGE_MATCH;
        ChainParams: PCERT_CHAIN_PARA;
        Chain: PCCERT_CHAIN_CONTEXT;
        ChainPointer: PPCCERT_CHAIN_CONTEXT;
        SimpleChain: PCERT_SIMPLE_CHAIN;
        ChainArray: PCERT_SIMPLE_CHAINARRAY;

        Выполнение:

        EnhkeyUsage.cUsageIdentifier := 0;
        EnhkeyUsage.rgpszUsageIdentifier := nil;
        CertUsage.dwType := USAGE_MATCH_TYPE_AND;
        CertUsage.Usage := EnhkeyUsage;

        GetMem(ChainParams, SizeOf(CERT_CHAIN_PARA));
        ZeroMemory(ChainParams, SizeOf(CERT_CHAIN_PARA));
        ChainParams.cbSize := SizeOf(CERT_CHAIN_PARA);
        ChainParams.RequestedUsage := CertUsage;

        GetMem(Chain, SizeOf(CERT_CHAIN_CONTEXT));
        ZeroMemory(Chain, SizeOf(CERT_CHAIN_CONTEXT));
        ChainPointer := PPCCERT_CHAIN_CONTEXT(Chain);

        if not CertGetCertificateChain(0, Context, nil, nil {Context.hCertStore}, ChainParams, 0, nil, @Chain) then
        begin
            GlobalError('Error code:' + IntToStr(GetLastError));
            Exit;
        end;

        ChainArray := PCERT_SIMPLE_CHAINARRAY(Chain.rgpChain);
        for i := 0 to Chain.cChain - 1 do
        begin
            if (ChainArray^[i].TrustStatus.dwErrorStatus = CERT_TRUST_NO_ERROR) then
            begin
                if not CertNameToStr(PKCS_7_ASN_ENCODING or X509_ASN_ENCODING, @ChainArray^[i].rgpElement.pCertContext.pCertInfo.Subject, CERT_X500_NAME_STR, Value, MaxFieldLength) = 0 then
                begin
                    MessageDlg('Error decoding: ' + IntToStr(GetLastError), mtError, [mbOK], 0);
                    Exit;
                end;
            end
            else
            begin
                ShowMessage('Trust Error');
            end;
        end;
        CertFreeCertificateChain(Chain);
        FreeMemory(ChainPointer);
        FreeMem(ChainParams);
        ChainArray := nil;

function TclCertificateStore.GetCertificateChain(hStore: HCERTSTORE; ACertificate: TclCertificate): Integer;
const
  revFlags: array[TclRevocationFlags] of DWORD = (0, $10000000, $20000000, $40000000);
var
  pChainContext: PCCERT_CHAIN_CONTEXT;
  ChainPara: CERT_CHAIN_PARA;
  pChain: PCERT_SIMPLE_CHAIN;
  pElement: PCERT_CHAIN_ELEMENT;
  i, j: Integer;
  certInChain: TclCertificate;
  p: Pointer; 
begin
  pChainContext := nil;
  Result := 0;
  try
    ZeroMemory(@ChainPara, sizeof(ChainPara));
    ChainPara.cbSize := sizeof(ChainPara);

    if not CertGetCertificateChain(0, ACertificate.Context, nil,
      ACertificate.Context.hCertStore, @ChainPara, revFlags[CRLFlags], nil, @pChainContext) then
    begin
      raise EclCryptError.Create(EclCryptError.GetLastErrorText(), clGetLastError());
    end;

    for i := pChainContext.cChain - 1 downto 0 do
    begin
      p := Pointer(Integer(pChainContext.rgpChain) + i * SizeOf(PCERT_SIMPLE_CHAIN));
      pChain := PCERT_SIMPLE_CHAIN(p^);

      for j := pChain.cElement - 1 downto 0 do
      begin
        p := Pointer(Integer(pChain.rgpElement) + j * SizeOf(PCERT_CHAIN_ELEMENT));
        pElement := PCERT_CHAIN_ELEMENT(p^);

        if not CertAddCertificateContextToStore(hStore, pElement.pCertContext, CERT_STORE_ADD_NEW, nil) then
        begin
          raise EclCryptError.Create(EclCryptError.GetLastErrorText(), clGetLastError());
        end;

        certInChain := TclCertificate.Create(pElement.pCertContext);
        try
          DoCertificateVerified(certInChain, pElement.TrustStatus.dwErrorStatus,
            pElement.TrustStatus.dwInfoStatus);
        finally
          certInChain.Free();
        end;
      end;
    end;

    Result := pChainContext.TrustStatus.dwErrorStatus;
  finally
    if (pChainContext <> nil) then
    begin
      CertFreeCertificateChain(pChainContext);
    end;
  end;
end;