load certificates and verify signatures