Would that completely prevent an off-line device or local LAN basted host from providing a web interface? (without first manually adding a cert on the users mac

Would that completely prevent an off-line device or local LAN basted host from providing a web interface? (without first manually adding a cert on the users machine?)