2 ms·

Definitely! That is how you are supposed to do it! That is a private CA, not self-signed certs, though.