Does the server check the validity of the certificate against a specific authority? If not, how will you be able to blacklist the certificate in case your device is stolen or lost?