initial cert retrieval and parsing