A lot of big enterprises run their own, internal, CA infrastructure.<p><a href="https:&#x2F;&#x2F;technet.microsoft.com&#x2F;en-us&#x2F;windowsserver&#x2F;dd448615.aspx" rel="nofollow">https:&#x2F;&#x2F;technet.microsoft.com&#x2F;en-us&#x2F;windowsserver&#x2F;dd448615.a...</a><p>In these instances, the fact that you can add a root certificate (your own) is a feature that facilitates security.