curl uaa http and https

bosh_stbcopzpq@a30077c1-3ac4-47c1-b32b-26a9f2d3fe7b:/var/vcap/sys/log/uaa$ curl -vvv http://uaa.bellevue.lab/oauth/token
* Hostname was NOT found in DNS cache
*   Trying 10.4.44.38...
* connect to 10.4.44.38 port 80 failed: Connection refused
* Failed to connect to uaa.bellevue.lab port 80: Connection refused
* Closing connection 0
curl: (7) Failed to connect to uaa.bellevue.lab port 80: Connection refused
bosh_stbcopzpq@a30077c1-3ac4-47c1-b32b-26a9f2d3fe7b:/var/vcap/sys/log/uaa$ curl -vvv https://uaa.bellevue.lab/oauth/token
* Hostname was NOT found in DNS cache
*   Trying 10.4.44.38...
* Connected to uaa.bellevue.lab (10.4.44.38) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS alert, Server hello (2):
* SSL certificate problem: self signed certificate
* Closing connection 0
curl: (60) SSL certificate problem: self signed certificate
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.