silence non-exhaustive pattern matching
actually call out to x509 stuff