Backport of Dont add the error from validating via issuer signature if the subsequent verification from extraCas succeeds into release/1.18.x

Backport of Dont add the error from validating via issuer signature if the subsequent verification from extraCas succeeds into release/1.18.x #4131