Verify X.509 certs