diff --git a/src/pkcs7.c b/src/pkcs7.c
index b2cccc0d..f2e1cec4 100644
--- a/src/pkcs7.c
+++ b/src/pkcs7.c
@@ -988,6 +988,7 @@ cm_pkcs7_verify_signed(unsigned char *data, size_t length,
                goto done;
        }
        for (i = 0; (roots != NULL) && (roots[i] != NULL); i++) {
+               cm_log(0, "vroot[%d]: %s", i , roots[i]);
                s = talloc_strdup(parent, roots[i]);
                if (s == NULL) {
                        cm_log(0, "Out of memory.\n");
@@ -1027,6 +1028,7 @@ cm_pkcs7_verify_signed(unsigned char *data, size_t length,
                talloc_free(s);
        }
        for (i = 0; (othercerts != NULL) && (othercerts[i] != NULL); i++) {
+               cm_log(0, "vother[%d]: %s", i, othercerts[i]);
                s = talloc_strdup(parent, othercerts[i]);
                if (s == NULL) {
                        cm_log(0, "Out of memory.\n");
@@ -1083,6 +1085,7 @@ cm_pkcs7_verify_signed(unsigned char *data, size_t length,
                        }
                        PKCS7_add_certificate(p7, x);
                }
+               cm_log(0, "verify coming up...\n");
                if (PKCS7_verify(p7, certs, store, NULL, out, 0) != 1) {
                        cm_log(0, "Message failed verification.\n");
                        goto done;
diff --git a/src/scep.c b/src/scep.c
index 35d66889..3c3a9350 100644
--- a/src/scep.c
+++ b/src/scep.c
@@ -987,6 +987,9 @@ main(int argc, const char **argv)
                                othercerts[0] = racert ? racert : NULL;
                                othercerts[1] = NULL;
                        }
+                       cm_log(0, "ra: %s", racert);
+                       cm_log(0, "ca: %s", cacert);
+                       cm_log(0, "certs: %s", certs);
                        ERR_clear_error();
                        i = cm_pkcs7_verify_signed((unsigned char *) results2, results_length2,
                                                   root, othercerts,