Make sure the returned cert is sane