verify reads certfile

still developing