Secure the whole application, but let a verification page open so users can check if their certificates is valid using the generated key.