ignore invalid cert options