not checking certificate