using https/wss with self-generated bogus cert