Why shouldn't I use self-signed certificates ?

Self-signed certificates work for small tests but become difficult to manage in larger environments.

They often cause:

• Browser security warnings
• Manual installation on every device
• No central management
• Renewal is forgotten because no one keeps track of expiry date
• Poor visibility of certificates
• Stored in PFX files with weak password - a security risk
• Certificates lying around on the file system without any trace of who created them and for what reason

A private CA makes certificate management much easier.