Tag certificate validation flaw