Check the success case, and check that we reject a self-signed certificate.
Go 1.3 and greater require ServerName or InsecureSkipVerify to be set. https://codereview.appspot.com/67010043/