Verify the certificate you get during the SSL connection is the certificate you expect to see.