move check_exp to CertUtils, add functionality to is_certificate_trusted