Use Powershell to generate certificates for your lab
ssl - Visual Studio 2017 gives 'Adding the Certificate to The Trusted Root Certificates store failed with the following Errror' - Stack Overflow
Integrating Microsoft Active Directory with AWS Certificate Manager Private CA Using Secardeo certEP
Root CA ignores CSR's critical flag on key usage - Microsoft Q&A
The Difference Between Root Certificates and Intermediate Certificates
Root Certificates vs. Intermediate Certificates: Everything You Need to Know
Renew Windows root CA certificate – 4sysops
Add and manage TLS/SSL certificates - Azure App Service
No certificate after Renew CA Certificate operation. - Microsoft Q&A
Updating List of Trusted Root Certificates in Windows
Certificate authority - Wikipedia
Step-By-Step Guide: Migrating Active Directory Certificate Service
windows - How to make certificate trusted and valid for more than one year - Stack Overflow
How do I back up and restore SSL certificate and its associated private key in IIS 7?
what is the default root ca list in Windows 10 by default - Microsoft Q&A