Need help in undertsanding server certification verification by the client