@nick_craver got it. machine certs (like rdp) can probably be ignored for some time if you're sure you know what you're connecting to but i see how it can be a pain in the ass.have you got any solution for these issues in mind (like longer validity, better certificate management soft)?