deal with hosts that fail to load the certificate