...
Factors to consider for a creating and use using a private CA to issue a private Server certificatecertificates:
- Do you have the necessary expertise to create a self-signed certificate; or to set up a private Certification Authority and issue a server certificate with it?
- For details on properties to impose on the the certificate, see "Consideration 2: Recommended certificate properties" below
- Does your eduroam NRO operate a special-purpose CA for eduroam purposes so that you could get a professionally crafted certificate without much hassle?
- Do your end-user devices all verify the exact server identity (issuing CA certificate AND expected server name)?
...