At some point, when I have time, I'd love to learn enough about this to create a working CA, and generate certificates with it, and do everything "right". But if I try to do this "right", right now, I'm far more likely to wind up with no working authentication at all.
Ciao, Michael.