This option is recommended for most production scenarios. You should use a certificate issued by an external certification ...

This option is recommended for most production scenarios. You should use a certificate issued by an external certification authority (CA) or you can use a certificate issued by your own internal CA if the CA is trusted by clients connecting to this server. The subject name of the certificate must match the host name of this server.