add self-signed cert creation