More broadly, you need a cert that your computer trusts. By default, a self-signed cert is not trusted because the CA (you) is not a trusted authority. So you have two choices: do what Carson suggests and buy a cert from a trusted authority or use Microsoft’s certificate server to create a cert and then use group policy to push the cert into the trusted state within your domain.