How To Set Up A Certificate Authority In 10 Minutes, March 28, 2012 Having a company owned certificate authority makes managing your network devices simpler and more secure. There is nothing inherently wrong with self-signed certs, but you can do better. You can build a CA issue your first certificate in about 10 minutes. Here is how to do it.
I took the advanced path to show the options. The defaults are OK. Unless you are using an alternate cryptographic provider, just use Microsoft's. It does the hard work. Make sure you pick SHA-1 and a key length of 2048. The hash algorithm is what is used to sign certificates and the key length is for the public/private key length.