Here is a place you may be able to get certs from: http://www.cryptgate.com/
echo "=============================================================="
echo "You must set a Common Name, which can be any word (? phrase ?)"
echo "You must supply an email address (can be a@b.com"
echo "=============================================================="
mkdir demoCA
mkdir demoCA/private
mkdir ./demoCA/newcerts
touch ./demoCA/index.txt
echo -e "01\n" > ./demoCA/serial
openssl req -new -x509 -keyout ./demoCA/private/cakey.pem -out ./demoCA/cacert.pem -days 365
openssl x509 -in demoCA/cacert.pem -days 1024 -out cacert.pem -signkey demoCA/private/cakey.pem
cp cacert.pem demoCA/cacert.pem
openssl req -new -keyout newreq.pem -out newreq.pem -days 365
openssl ca -policy policy_anything -out newcert.pem -infiles newreq.pem
openssl pkcs12 -export -in newcert.pem -inkey newreq.pem -certfile demoCA/cacert.pem -name "user" -out user.p12