Spent hours trying to get a self-signed cert working locally - then mkcert solved it in 5 mins https://github.com/FiloSottile/mkcert