handle certificate parsing error more generous