You could still used a self-signed certificate, you would just need to view the certificate anytime you’re on someone else’s machine to check its validity. And

You could still used a self-signed certificate, you would just need to view the certificate anytime you’re on someone else’s machine to check its validity. And you can always use wildcard certificates to keep hostnames secret.