Generally speaking you will have to override the browser's automatic checking of certificates to establish trustworthiness as a prerequisite for secure communications.
The signature is still checked and the browser will usually tell you via some sort of error message what about the certificate makes it untrusted (unknown signing authority, expired certificate, etc.). The end user then needs to make an informed decision manually on a case-by-case basis to decide whether or not to trust the certificate.
