check_certificate now expects the REQUEST *request.