ignore cert errors with -x option