way to validate server certificate