The cert "bootstrap" code now checks certs for validity