CentOS may need --no-check-certificate as well due to domain mismatch