constants for cert verification