don't have comment client verify cert