[certs] validation