[frcc]

Yes, the question did relate to frcc sites facing the public.

I obviously overlooked the fact that Google(Tm) probably does rate self
certificates lower, (defeating the intent for self cert)

In fact a client's browser (mentioned above) would probably issue a warning for self generated certs
raising more alarm than none.

The question was generated to collect comments for problems encountered
when doing this on a production server for the first time. I now see the
process is straight forward. One would simply have to replace the self generated cert with
one from a CA per ssl(8). Just a matter of cost/benefit.

Thankyou