SSL validation explained