requireValidCertificate