added a task to retrieve certs (for confirming signing)