Determining certificate validity