iirc, the clients use the certs but ignore them. but to the censor they see the certs are well known, so allow them thru