cert name check minor changes - one MUST->SHOULD though