diff --git a/README.md b/README.md
index bd91ea2..6b3446b 100644
--- a/README.md
+++ b/README.md
@@ -58,7 +58,7 @@ apache:
       path: '/var/www/site_guys_statics'
 
     ssl:
-      mode: 'ca'  # create minimal ca with signed server-certificate
+      mode: 'snakeoil'
 
     config:  # add settings as key-value pairs
       KeepAliveTimeout: 10
diff --git a/defaults/main/2_site.yml b/defaults/main/2_site.yml
index 6207762..166091f 100644
--- a/defaults/main/2_site.yml
+++ b/defaults/main/2_site.yml
@@ -37,7 +37,7 @@ defaults_site:
     path: '/var/www/html'
 
   ssl:  # see: https://github.com/ansibleguy/infra_certs
-    mode: 'ca'  # existing/selfsigned/ca/letsencrypt
+    mode: 'snakeoil'  # existing/selfsigned/ca/letsencrypt/snakeoil
     # existing:
     #   We expect the certs to be placed in the role's 'files' directory named like the site
     #   Example: files/certs/ansibleguy.key and files/certs/ansibleguy.crt
diff --git a/molecule/default/converge.yml b/molecule/default/converge.yml
index b699b60..7d64985 100644
--- a/molecule/default/converge.yml
+++ b/molecule/default/converge.yml
@@ -9,7 +9,7 @@
           domain: 'apache2.test.ansibleguy.net'
 
           ssl:
-            mode: 'ca'
+            mode: 'snakeoil'
             cert:
               cn: 'Apache2'
               org: 'AnsibleGuy Test'