Ahh yes the: we can't have self signed certificates for security reasons but also can't open up the environment to the web, and we dont have our own CA server, trifecta.

Solution: awkward, manual, certificate import process from a 3rd party vendor.