SSL/TLS Certificate

The certificate is self-signed: no certificate authority vouches for it, so browsers warn every visitor and other clients refuse to connect.

Fix: Replace it with a certificate from a public CA. Let's Encrypt issues them free.