run verify before and after signing
clean up requires, add shebang
remove unneeded puts
and simplify the ca cert read