minor fixes for client SSL cert workaround