Question : Installing CA on 2003 server

Am installing "Certificate Services" on Windows 2003 server to provide self-signed certificate for OWA.

Not sure what to put in "Common name for this CA" and "Distinguished name suffix".
Search results vary from "what ever you like" to "must be your FQDN"

External name is in the form of   123.456.789.012.hostsubdomain.hostdomain.net
Internal name: servername.internaldomainname.local

Any advice?

Answer : Installing CA on 2003 server

If you are implementing RPC over HTTPS in your organisation, I would recommend you to go with a 3rd party certificate as it will reduce your administrative work. A Go Daddy Cert comes at 30$/year. The amount of work reduced is worth the value.

Anyways for your answer:

- Common Name of CA: It does not matter what you keep this as. For Eg: Go Daddy, Verisign are common names of 3rd party CA's. They issue cert's for external FQDN/ host name's (mail.domain.com)

The external name will come in picture when you generate a request for a new cert from this CA.