Isn't there a utility in the ssl directory to create a certificate? I think someone mentioned the procedure when they were talking about secure POP.