likely, certificate had vast domain names from non-sense naming to real one, thats why some app had

TLS no verify

thing