get invalid certs
first go at fix cross-cert function