new (un-expired) self-signed ssl certificates