according to the open web application security project (owasp), a best practice to mitigate a particular risk is to ensure that digital certificates supplied by the server for authentication are valid. which top 10 risk is involved?