Find real issuer

Hello, 
Is it possible while iterating certs to know which one is the Root cert, or the User cert?
In other words, is it possible to rebuild the whole certs chains with the real certs order ?

Right now, when I do this the order is incorrect:
```
for (issuer, serial), cert in auth.certificates.items():    
    pass
```