more debugging of certificates