Complete (?) check for valid SSL certificate Checks all of the following: Fetch SSL certificate from URL (on optional given host) Does the certificate contain our hostname? Has the certificate expired? Download (and cache) CRL Has the certificate been revoked?