doc/faq.md: the certificate is not invalid, it's just auto-signed