make additional check for cmd ca cert