I've lost track of how many times I've shared this link here, but if you want a CA for devices that you control, that's quite straightforward. This link describes doing it on a Raspberry Pi, but the same software should run on just about anything Unix-y:
But as said above, if you need something trusted by the public, you'll need to go through all the relevant steps and pony up some serious money.