Even more strange, seeing as there appears to be working validation code which is #ifdef 0, even back in 2003?

At the very least, would have been a great place in the code to comment on where (since obviously not there) the cert is supposed to get validated!