Certificate domain validation