added option to skip cert check