libraries: attempt to check certificate, then fallback w. warning