1) If you are using the latest ver. 11.7: Add "-checkcert 0" with ssl.
2) If you are not using previous ver.(less than 11.7): it worked with only put ssl.
There is little-to-no point in -checkcert 0 if I want to be sure that server is real one, nit mitm'ed, but thanks for suggestion anyway.
Still will be nice to hear semi-official statement, if possible.