Self-signed certificates or national CAs not internationally recognized cannot obtain default trust from global browsers, requiring users to manually install root certificates.