this is a demo. you can just as well download the cert and tell curl to use that to verify.