use self-signed is now true