pub fn chain_hash(chain: &[DelegationCert]) -> Vec<u8> ⓘExpand description
32-byte SHA-256 of the concatenated delegation_sign_bytes of each cert. Used as a stable chain identity inside SessionToken — a cert rotation changes chain_hash, invalidating every token issued against the old chain.