[WIP] Extend exception/cert handling

related to #28 
I don't know, I think I'd prefer for it to error out (as early as possible), but I let you decide.