I am working on a B2B project that requires that we validate their secure certificate when they post xml to us. Has anyone ever done this before? I know how to check for things like ip address referrer.