Use X509Certificate instead of Certificate
Initial implementation of CertificateValidator