You can create your own CA in 5 minutes with a linux box and a copy of the OpenSSL binary. The hard part is getting your signing certificate accepted into clien

You can create your own CA in 5 minutes with a linux box and a copy of the OpenSSL binary. The hard part is getting your signing certificate accepted into client programs, web browser manufacturers and operating system vendors are picky about who gets in and who doesn't. If you're willing to handle all of the key management yourself and you are only accepting certificates that you know you control... and you know for a fact that nobody snooped your private key from the signing station... and you never stored the signing key on any persistent storage in the clear... and you implicitly trust all connecting clients to not be spoofing authentication to users, and, and... Then you can say truthfully that you think you can trust certificates signed by that key maybe.