@heterodox self-signed can be an almost insormountable pain at times though. Probably not a case here, but you can't really get them working for WebSockets for example. Oh, ok, you can, in FF, and only in FF, if you try to open the
wss:// URI it will actually ask you to confirm a security exception. But that's FF only.
Again, this is likely not a concern here, but I learned a long time ago that dealing with self-signed certs is more pain than getting a valid one working, even if it involves other kinds of pain.