certificate validation part 1
introduced ICertificate so testing isn't so hard