ssl_check_cert option does not have to be given