Comment by castorio

self-signed is as good as CA-based from a security-POV. it's just that the browsers complain.