Pascal, in your Howto, you mention you'll talk about beginning your own certificate authority, but AFAICT, you don't discuss how to do this.
I did this a year ago using Sean's older howto, but I don't remember exactly what I did, and my certificate has expired.
Do you just use the test certificate?
How do I sign my certificate without using a third party service?