Create certificate with makecert for LDAPS on a DC ?

[Leo Pold]

I have gone through Microsoft's Knowledge base article and have create my self-signed certificate with certreq. I have created the certificate in Personal\Certificates (under Computer) but while checking the certificate i get a warning saying "This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store." and when i try to connect (locally)to my LDAPS using ldp.exe than i get an error message saying "Error <0x51>: Fail to connect to FQDN_OF_DC.domain.local.". What might be wrong? am i missing anything??

[Gonzo]

I think that you will have to create certificates using below command:
certreq -new request.inf request.req
Just go trough the below article and search for the line where it says "Note Some third-party certification authorities may require additional information in the Subject parameter.............." you will come to know what i am talking about.