Here are my notes on how to create S/MIME Certificates signed by OS X Server's Open Directory Certificate Authority. It's pretty easy to set up your own small-scale PKI on OS X Server using the OD CA, which will already be a trusted CA.
Make sure that you have OS X Server's Certificate Authorities installed on your local admin account: