serive_win: check cert only on official build