Add output explaining why we make a second connection if the X.509 certificate doesn't pass verification.