If you control both the server and the client, you can make yourself your own private CA, issue all the certs you need, and have no browser errors anywhere.