removed cert checking when downloading external packages

- could fail if certificate unknown -- but should not really worry us anyway