Move away from self-signed.badssl.com

We're using https://self-signed.badssl.com to validate a scenario where SSL validation may be skipped locally. Changes to the site are affecting us (as right now where this URL started to return a 404 where it previously returned a 200).

We should update our infrastructure to use a local server that we control.