-verifycert command-line option