SSL certificate validation for "virtual" command or "LB::reselect virtual"

If the "virtual <virtual name>" or "LB::reselect virtual <virtual name>" commands are used, my understanding is that there needs to be a client SSL profile on the destination virtual if there are any iRules that might inspect the content.

In that case, are there any trust validations that are done on the SSL cert which is being presented? By observation, it seems like an expired cert is rejected, but is there any certificate name or CA validation? Or will pretty much any cert work? Can that be controlled?