further refactoring of MTC, add single certificate verification support