Give openSSL a try for self-signed certificates. It works on many platforms and has all the features you might need for this task (and then some...)

Best regards

-lem, but some call me fokat