- Create root certificate authority
- create domain certificate and assign to port 443 in IIS
https://advancedhomeserver.com/domain-certificates-and-windows-server-2012/
- Export Root certificate and domain certificate
- domain certificate must contain private key and saved as .pfx