Re: And still not handling self-signed certificates well
What do you mean with not handling well?
I created my own CA and am signing my own certificates with that. On my browsers and devices I installed said CA and all is very well. Yes, even in FF. Only Android older than 5 doesn't cooperate well.
Upside is that I can create new certificates as I wish and not have to touch every single client.
And as for difficulty, there are plenty of guides to be found for this 3 commandlines operation.