whitelist certificate issuers and do ssl checks (bug whitelist)