enable SNI and verify certificates