Do I need to create a certificate signed by the root CA certificate?

Let me guess you are going to test SSL on your local environment. If yes, then you need to do self signing by root CA certificate. If not then you have to purchase certificates from renowned companies like Verisign, Geotrust or so on and install on the server. The purchased certificates are issued for a domain name like google.com or yahoo.com or xyz.com.