this undos 8a729061d5. as it turns out 4.1 and 4.0 only break when checking if a cert is self signed.
8a729061d5