lots of questions, rct parsing cert output