As a network engineer I deal with digital certificates quite often for EAP-TLS authentication,  VPN, and device certificates like on WLC controllers.

Customers that don't need a public certificate just want a valid certificate loaded on the device to make it work. I used to create certificates with OpenSSL, that is …