another try to support self signed certs