Pascal, in your Howto, you mention you'll talk about beginning your own certificate authority, but AFAICT, you don't discuss how to do this.

I did this a year ago using Sean's older howto, but I don't remember exactly what I did, and my certificate has expired.

Do you just use the test certificate?

How do I sign my certificate without using a third party service?