better parameters for cert check