coff: add sanity checks on certificate_table