swanctl doesn't do any (online) certificate validation, it just parses and or decrypts them and passes them on to the daemon.