Truly avoid invalid certificate match *fix