it still prompting this, but have used openssl to check both cert is match