now with custom self-signed cert