PKI: self-signed digital certificate?