add cert verification mechanism