adds tsa cert chain check for env var or tuf targets.

adds tsa cert chain check for env var or tuf targets. #5338