From the blog post: "Organizations relying on certificates for unqualified names should use their own private CA for their private namespace. For example, all

From the blog post: "Organizations relying on certificates for unqualified names should use their own private CA for their private namespace. For example, all those Exchange shops can use Microsoft's CA software."