add set callbacks / set cert check