all but signature (certificate verified now also)