[__alexs]

This doesn't do any CRL or OCSP checks at all so you are still vulnerable to attacks using revoked certificates.