@thbley i have been trying to figure out the cause of the opposite happening. some failed cert lookups using the openssl api directly, but successful ones when using curl lazily. probably the same just different.