userCertificate:certificateExactMatch: problem