X509-validated payment requests