diff --git a/platform/src/ssl_stream.cpp b/platform/src/ssl_stream.cpp
index 80bd88c..387a562 100644
--- a/platform/src/ssl_stream.cpp
+++ b/platform/src/ssl_stream.cpp
@@ -686,7 +686,7 @@ struct ssl_mgr * ssl_manager_init(const char * ini_profile, const char * section
         mgr->down_stek_box = sess_ticket_box_create(ev_base_gc, stek_group_num, stek_rotation_time, logger);
     }
 	MESA_load_profile_uint_def(ini_profile, section, "root_cert_not_installed_is_not_pinning",
-		&(mgr->root_cert_not_installed_is_not_pinning), 0);
+		&(mgr->root_cert_not_installed_is_not_pinning), 1);
 	MESA_load_profile_uint_def(ini_profile, section, "service_cache_slots",
 		&(mgr->svc_cache_slots), 4 * 1024 * 1024);
 	MESA_load_profile_uint_def(ini_profile, section, "service_cache_expire_seconds",
@@ -696,7 +696,7 @@ struct ssl_mgr * ssl_manager_init(const char * ini_profile, const char * section
 	MESA_load_profile_uint_def(ini_profile, section, "service_cache_fail_as_proto_err_cnt",
 		&(mgr->svc_fail_as_proto_err_cnt), 5);
 	MESA_load_profile_uint_def(ini_profile, section, "service_cache_succ_as_app_not_pinning_cnt",
-		&(mgr->svc_succ_as_app_not_pinning_cnt), 3);
+		&(mgr->svc_succ_as_app_not_pinning_cnt), 1);
 	MESA_load_profile_uint_def(ini_profile, section, "service_cache_fail_time_window",
 		&(mgr->svc_cnt_time_window), 30);