this is doing exactly same things as untrustedCert