If you're paranoid, learn the OpenSSL command line, make a self-signed CA cert, and have your clients trust your cert and distrust all other CA's. Of course, t

If you're paranoid, learn the OpenSSL command line, make a self-signed CA cert, and have your clients trust your cert and distrust all other CA's. Of course, this only applies if you have control of your clients, and those clients are only going to be accessing your server. If you want the general public to be able to access your site through a normally configured web browser, this setup is quite unworkable; but the other commenters in this thread have some advice.