retract SSL