Removed withCredentials when doing HEAD. It seems to pick certs randomly.