basic TOFU cert pinning