better error handling, ignore certs