now works with -verify-certificate argument