This is a fantastic article that I use each time I'm generating a Server Certificate.  Only doing it each time the certificate needs renewing means I forget every time.

For a Trusted third party signing you only need steps 1,3,4B,5, i.e. you can leave out step 2 - this is just for signing the certificate request yourself.  For those like me, not really understanding the process and stepping through everything very carefully, knowing this would have saved me some time!

Perhaps this might be worth pointing out at the beginning?