make sure cert error is visible