New-SelfSignedCertificate -DnsName "KnowYourToolset Cert Authority" -CertStoreLocation "Cert:\LocalMachine\My" -KeyUsage CertSign,CRLSign
Creates root authority with permission to sign stuff
Export-Certificate -Cert Cert:\LocalMachine\My\<CERTHUMB> -FilePath kytroot.cer
Import-Certificate -FilePath .\kytroot.cer -CertStoreLocation Cert:\LocalMachine\Root