4 ms·

Having the private key means you can sign your own certificates to serve HTTPS with, so no MITM required.