try/ecxept for cert verify