Source: https://kb.fortinet.com/kb/viewAttachment.do?attachID=Sign%20a%20CA%20certificate%20on%20Windows%20server%202008%20and%20import%20the%20certificate%20for%20SSL%20inspection.pdf