Generate a CSR via MMC certificate snap-in using Windows (digicert.com)
for a wildcard certificate, set the friendly name and cn to *.mydomain.com