re-enable ca trust check if selfsigned not supported