have to ignore possibly bad cert to get this working