Master now uses its own certificate