moved assignment of CERT_UNKNOWN