missing check for cert