you can import the public key as trustworthy but that is device specific and when you regenerate or generate self sidned cert on many machines you must import them all. THats where ca comes in to a play