I have an application that hosts multiple RESTful APIs. When the application is installed, it automatically generates a self-signed certificate authority cert and then each API gets its own certificate signed by that authority.