Checking expired/revoked certificates