use 1.9.3-compatible cert validator