When creating an internal certificate, offer the user a choice of what constraints to place upon the certificate (CA, Server, or User).
Create certificate for HTTP Server option