Would it be correct to say "certificate *should be* verified against the CA *for each client request*"? If that's correct, I think it is helpful to add that extra specificity.