xg15 is going to have to run a self-hosted Certificate Authority (CA) and generate certificates himself.