If I use openssl to create a certificate authority (CA) root (e.g. this blog post or this MDN article) and use it to sign a certificate signing request (CSR), is the resulting signed certificate considered "self-signed" by current desktop PC browsers (Firefox, Chrome, IE)?
Does the answer depend on whether or not the CA root certificate is installed as a trusted authority in the relevant certificate manager?
My understanding is that the answer should be "No, and no." but I have a problem and don't know where my understanding is incorrect.
openssl x509 -in <cert> -text -noout>
. I've never had a problem "becoming my own CA", but I know where a number of landmines lay.