automatic cert verify; closes #28