At least one valid certificate is needed