Do you have a site in production for which you have purchased a Verisign SSL certificate? Do you need a cost effective way of simulating that certificate on your development and/or staging environments?
Typically SSL certificates average around $450 each (per year). If you have multiple environments you need that require SSL for testing purposes or if you are tired of commenting out your https redirects so that your site will work, this article will be helpful.
You have a few options for enabling SSL on your site:
1. Verisign offers a 14 day free trial certificate. You would utilize this trial if you are interested in purchasing a permanent one but just want to test to see that you code works appropriately once purchased. However, you won’t be able to use this certificate permanently – it will expire after the trial period.

2. You can purchase a permanent SSL certificate from Verisign for each of your environments but this is a very expensive solution.
3. The best solution I have found is installing a self signed certificate. These are free and with a workaround solution you are able to create multiple certificates on the same server if it houses multiple secure sites. The instructions below are for IIS 6.0 and Windows Server 2003.
The tool that you are interested in is called SelfSSL – it comes free under the IIS 6.0 Resource Tool Kit. Download it on http://www.microsoft.com/downloads/details.aspx?FamilyID=56fc92ee-a71a-4c73-b628-ade629c89499&displaylang=en. It is just under 6 MB and the installation is quick.
STEP 1: Run the install

Step 2: Fill our your user name and company information

Step 3: Choose Custom and then specify the directory where you want to install. It is fine to choose the default.
Step 4: Make sure that the tool SelfSSL 1.0 is selected.

Step 5: Click next and then finish to complete the installation.
Step 6: Open up a command prompt and type in the path C:\Program Files\IIS Resouces\SelfSSL
Step 7: Type in selfssl ? This will bring up the help menu and list out all the options available.
Step 8: The format you will follow is “selfssl.exe /N:CN=CommonName /K:1024 /V:7 /S:1 /P:443”
- The /N:cn parameter specifies the common name you want to use. Typically I put the name of my domain here.
- The /K parameter specifies the key length of the certificate. Typically, it is 1024
- The /V parameter specifies how long the certificate is valid for in number of days. If you want it for 2 years, type in /V:730.
- The /S parameter specifies the site id. In order to find the site id of the one you are interested in, go to IIS and click on the Web Sites folder. A list will appear of all your sites. The 2nd column is the site identifier. So in this example you would type in /S:2101337811.

- The /P parameter specifies the port you would like to use. The default is 443 for SSL.
Step 9: After you issue the command it will ask if you would like to replace the existing SSL settings. Specify Yes.
Step 10: The self signed certificate is installed! You can double check by opening up IIS, right click on the site and go to Properties. Then go to the “Directory Security” tab and click “View Certificate”.
If you are interested in multiple SSL certificates on the same server, please read this article:
http://blogs.msdn.com/b/david.wang/archive/2005/04/20/selfssl-bug-with-websites.aspx