Another detail he kinda neglected, is that if you don't want browser warnings, the then common name of the subject(or an alt name) needs to match the host the user connects to. Having a cert for "www.joshbetz.com" in your cert store does not preclude the warnings about the host name mismatch when you visit joshbetz.com/