1.check cert file