Technically you don’t need verified certs to get the encryption