case we do without server cert?