Reply to post:

Exactly, was going to say the same. They don't trust it, doesn't mean the ones using don't. If its a corporate VPN, no need to buy an externally trusted certificate, you can use your own internal CA to issue it, all the corp computers will trust it.