describe SSL CA issue and available workarounds