-only check ssl cert once