1. A computer-implemented policy-based security certificate filtering method, comprising steps of: receiving, by a first entity in a communications network, a security certificate of a second entity; and determining whether the first entity will treat the security certificate as though it has been authenticated, comprising steps of: locating at least one policy specification that is applicable to resolving the determination; and evaluating each of the at least one located policy specifications until reaching a conclusion about how to treat the security certificate.