It seems it now generates a certificate that works 'well enough'