`cfssl` shows how easy could getting certificates signed be for the typical use case.
https://github.com/cloudflare/cfssl