Do this ONLY if the server's certificate is invalid.