only validate cert things if they exist