got storage certificate generation, signing with dir key, and verifying trust chain to root public key working