default behavior of server certificate validation