fixed CA verification