    public static function client()
    {
        if (is_null(self::$client)) new CertificateAuthenticate();
        return self::$client;
    }
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.