Would it be better to install the origin certificate instead of the self signed one?
Absolutely. A self-signed certificate won’t be checked for authenticity. The origin certificate (or some other one tied to your domain name) will let you use Full (Strict) SSL, creating the most secure connection.
I installed it yesterday along with some other actions and now I have a green lock