Add EK cert validation functionality

[whooo]

cryptography >= 45.0.0 has support for custom certificate chain verification, it would be useful to support checking EK certificates

[whooo]

Not all functionality needed is currently available in cryptography to verify a TPM EK certificate