no self signed cert in prod