check for certutil with 'command -v'