I became my own CA. Install certs in the system/browser and issue keys that are 10 years out. Make everything with the CertManEX tool.