Highly recommend reading someone's applied essentials guide on certs, and the various methods of accomplishing SSL for self-hosted stuff.
This stuff is much more complicated in isolation from the rest - full picture easiest.
This stuff is much more complicated in isolation from the rest - full picture easiest.
To be sure, PKI and certificates in particular have a lot of room for improvement in the UX department. Especially on Windows, where one frequently has to deal with not just .pem files but .cer, .pfx (with or without private keys), and more.