Question: How do I use BouncyCastle to generate a Root Certificate and then a site certificate that is signed by that Root certificate?