On sites where the certificate can not be validated, you may be supplied the option to incorporate an exception. Self-signed certificates make your facts Secure from eavesdroppers, but say almost nothing about who the receiver of the information is. This is typical for intranet websites that aren't offered publicly and https://www.npr.org