Add ca check, secure connection, renew certificates