added validate cert option