Can you check to see if this actually finds the appropriate CertificateItem and log an error if it doesn't?