fix certificate leak
add check on multiple certs in p12