Currently real self-signed certificates and certificates created from an internal CA are treated the same. I want a possibility/a place to upload a root CA and certificates that are signed from this, would be then treated as it were certificates that come from a public CA.

This would make it possible to track our internal certificates and see where we still have a real self signed that we need to change.