add more debugging for certificates