NEVER

We should never rely on identity assertions made by the certificate.