add configurable SSL cert checking, new sslerror response. openrightsgroup/cmp-issues#107