this is wild. tls isn't foolproof after all https://danielmangum.com/posts/fooling-go-x509-certificate-verification/