Default Certificates

I was wondering if somebody could point me to an article or blog post about how to replace the default SRM certificates with ones that are publicly signed such as ones by Microsoft CA

I will be deploying SRM 5.5 in a secure environment. The SRM installation documentation is lacking in this area.

Thanks in advance