Question: how are ssl certs validated?
Answer: Your web browser downloads the web server's certificate, which contains the public key of the web server. This certificate is signed with the private key of a trusted certificate authority. ... It uses this public key to verify that the web server's certificate was indeed signed by the trusted certificate authority.