add self-signed certificate