SSL CA validation improvements