proper use of multi-object query, will handle certificates through json/db streaming instead of through settings