Currently in the audit scanner code base we skip the certificate verification when we make requests against the policy server. This is not recommended from a security point of view. Therefore, we need to change the program adding all the configurations necessary to perform the proper certificate validation.