have to ignore possibly bad cert to get this working, and tests were inconsistent