add verify_api_cert to spec test