Hacker News Reader

Those are both “should not”, not “must not”. So technically this isn’t breaking the rules, though it’s obviously incredibly not recommended.

yeah but i think you'll have a hard time finding a client library which will consider the certificate valid. If it does i would consider it broken.