right now, we have to drop the server cert on the box even if the cert of the server is valid and signed by a trusted ca