Strategy from those who know how things work. Implementation from those who see the big picture.
Search
Survey of Client and Server Certificate Processing in Common Software
Security research into the acceptance of root CA certificates, self-signed certificates, and various certificate processing edge cases in popular web browsers and web server software.