all but certificate verification ready
moving forward, now only have to get actual key to verify it with