implemented TOFU policy on HTTPS certs validation