fix cert validation