Extra x509 certificate checking