upload: better error checking
upload: experimentally don't verify peer CAs
upload: more verbose
upload: move check to right place