custom X509TrustManager for startcom certificates