jars are now (self-)signed. also adding public certificate in case anyone wants to trust me.