Just as a fitting example: The 3CX-App seems to have its certificate publically available for the custom hosted servers too.