[the456gamer]

If you are trusting a user since they are the same one that originally contacted you, you don't. It's tofu

[lmz]

I can't believe this was downvoted. Seriously a Certificate is binding a public key and the attributes (mainly the identity). If you don't need to use the attributes, you don't need a certificate!