Extra validation for EAP-TLS