Better error reporting in TLS sockets.

Reduce certificate checking... the default level will not validate the
certificate used by acme-staging-v02.api.letsencrypt.org.  Presumably, that
means other Google API stuff won't work either.