The certificate needs signing by a certification authority. There are rules around getting certificates signed for domains.
Certificate authorities that don't obey these tend to go out of business rapidly.
Mainly as browser vendors will revoke their certificate from the browser.
