sometimes there's a setting to ignore the certificate, but that's not the recommended approach