Always call SSPIWrapper.CheckRemoteCertificate().