Amazon interview question

How does a server validate a security certificate