title: How to verify a rollover certificate?
body: <p>I want to verify a certificate that comes from a SAML assertion (issued by AZURE AD)</p>
  
  <p>They can rollover the public key at any time. I am assuming it means that I cannot manage them manually in the trusted root store.</p>
  
  <p>I am using <code>X509Certificate2.Verify()</code> which is returning <code>False</code> if the certificate is not in the Trusted root store. Should I use <code>X509Certificate2.Build()</code> and set it to ignore if it is trusted?</p>