fix error handling for missing recipient cert