don’t verify certs since we are just checking for the algorithm

this means we don’t need to worry about having the correct root certs