ecdsa verify from cert works