this is only in the pure local no internet case. with internet it’s a no-install plug in and done

you don’t need to install any certificates in any case. the server just needs to validate the client is well signed