> I run my own self-signed Certificate Authority (CA) and my reverse proxy uses certs signed by this CA There's no need to track certificates from private CAs.

> I run my own self-signed Certificate Authority (CA) and my reverse proxy uses certs signed by this CA There's no need to track certificates from private CAs. In order for your browser to trust the certificates you need to manually trust the CA (or your system admin will configure it). Everyone else will see it as invalid.