@rdh Indeed, SSL/TLS foundations are actually totally possible to use without involving CAs at all.