Symptom
Multiple trustpoints are configured with the same CA certificate. In this case, the second trustpoint configured would have 'no validation-usage' configured as Lina only allows 1 trustpoint to be configured with a specific validation usage. This is expected and predictable behavior.
However, multiple trustpoints using the same CA certificate can lead to certificate chain verification failures. This can be validated on the FMC by checking the CA certificate (Devices -> Certificates -> click on a button with the magnifying glass besides a CA certificate) and looking at 'Associated Trustpoints'.
Conditions
ASA or FTD configured with certificates used by Lina.
Workaround
Remove unused or conflicting trustpoints.
