they're just a self-signed cert for default.   I would expect anyone wanting a real cert would do it via a encrypted databag.