whitelist certificate issuers and do ssl checks (bug 857815)