re-added ssl verification with custom ca cert logic (oops)