always verify the ssl cert, letting exceptions bubble up