rpaas: invert ssl certificate check