try NODE_TLS_REJECT_UNAUTHORIZED