small tidy
subkey binding check, start primary binding check
check primary bindings
begin refactor
refactor
always check binding when verifying
Merge pull request #196 from ashh87/master

cross-cert changes