Ignoring invalid certificates is a never a good thing to do.