ignoring invalid certificates