>You can `openssl req` a self-signed certificate, and as long as whatever device you want to talk to accepts it Device? We're talking about browsers. Browsers

>You can `openssl req` a self-signed certificate, and as long as whatever device you want to talk to accepts it Device? We're talking about browsers. Browsers are getting increasingly hostile towards self-signed certs. Ironically, Google doesn't trust third-party root CAs, so they became one themselves. It's good to be the exception to the rules you push on others.