this is technically correct, of course, but won't work in most browsers since the cert is signed by a custom ca.