[noman-land]

Wouldn't it be better to bundle a script that generates a cert instead of the cert itself?

[baobun]

If I understand it right they bundle a publicly trusted shared cert and want to allow their users to get running on vanilla devices without having to provide a domain.