No Decryption profile (Objects > Decryption > Profile > No Decryption) controls server verification checks for traffic that you choose not to decrypt as defined in "No Decryption" Decryption policies to which you attach the profile. Server Certificate Verification Block sessions with expired certificates Block sessions with untrusted issuers https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/decryption/decryption-concepts/no-decryption-decryption-profile.html