You would think why use certificates only yourself trusts and not the rest of the world?
Well for most applications you could certainly use commercial vendors for your SSL certificates if your certificates require a common PKI, but why spend the money if you manage the computers that need those certificates?
That was a situation I was in when I wanted to create an offsite replication/backup for my servers. I created my own PKI for the certificates and after some searching for information how to do it I came acros an article from Juniper. it’s a step by step howto from creating the root certificate to signing the sign requests.
Now I use my own PKI for the replication and I think I will use this root in the future for more applications 🙂
Yours truly