starting CMS verification with NSS