prove some theorems for use in type_to_cert