ignores expired TLS cert