add self-signed cert