better ssl precedence for non self signed certfs
icinga stuff