@sarah@sosial.link you could selfhost your own internal CA like smallstep or XCA, then install the root cert to all your devices.