When running in FIPs mode, certificate is being checked, and an error is being raised if the certificate is not using a valid algorithm and key size.

Anyway, not using a certificate should be accepted, and the check is also raising error when no certificate is provided