X509_check_mumble() failure is <= 0, not just 0