For those interested in being their own certificate authority, as opposed to self-signed certificates, this site is a fantastic resource. I used it a year ago to setup certificates for my mail server and I used it again today to update the certificates.
Definitely worth a read through.