Use a throw-away CA for the tests
Using
https://baltig.infn.it/giaco/x509-scripts