Net validating x509 certificates
So, here's what you need to do in terms of code (Open SSL):.
Additionally you would need to read RFC 2560 (OCSP) and implement OCSP client.
How does that compare to Open SSL in terms of usability?
Also, I am looking for programmatic solutions as I will not be able to launch command line utilities..
It is flexible and powerful enough and lets you perform additional, deeper checks on each step.
Also this component can work with both Windows certificate storages and any other certificates, certificate chains and storages that you might have in files or in memory.