private-proxy cert ok