Services
At least one service must be registered.
The certificate is published as the service ServiceDigitalIdentity, so its subject must identify the provider: set the organisation (O) to exactly the Entity Name entered above. It may be self-signed or issued by a CA — this publisher does not build or verify a certification path, so a self-signed certificate is accepted.