Yeah, '--insecure' works without certificate.
Adding a few lines to the comment