handling fake certificates