code: func (c *CertChecker) CheckCert(principal string, cert *ssh.Certificate) error {
  	err := validate(cert)
  	if err != nil {
  		return trace.Wrap(err)
  	}
  
  	return c.CertChecker.CheckCert(principal, cert)
  }
docs: // CheckCert checks certificate metadata and signature.