don't do loop check for single self signed certificate